Inherent risk

Inherent risk = likelihood × consequence, assessed as if no controls exist. It represents the true hazard potential of an activity. Organisations use it to prioritise resources — high inherent risk scenarios warrant robust control frameworks even if current residual risk is acceptable, because control failure could be catastrophic.