Glossary · Methodology
Inherent Risk
The level of risk that exists before any controls or mitigation measures are applied to reduce impact or likelihood.
Full definition
Inherent risk represents the raw exposure an organization faces from a threat or hazard in the absence of management intervention. Assessing inherent risk helps prioritize where controls are most needed and evaluate whether current safeguards are adequate. For instance, a pharmaceutical manufacturer faces high inherent risk of contamination in sterile production, requiring extensive quality controls. Comparing inherent risk to residual risk (after controls) reveals the effectiveness of the control environment and guides resource allocation for risk treatment.
risk assessmentERMcontrolsmeasurementbaseline