Inherent risk
The consequence risk of a task before recommended controls are applied.
Definition
The consequence risk of a task before recommended controls are applied.
Practical test
What material consequence could occur if the task is wrong before giving credit to approval, logging, or other safeguards?
Example
Contract acceptance remains high consequence even when qualified review reduces the chance of an error reaching execution.
What to record
For inherent risk to be operational rather than a reassuring label, record the affected party, plausible harm, scale, reversibility, detection timing, and assigned band. If those facts cannot be observed or tested, do not treat the term itself as evidence that the workflow is safe.