inherent risk

Also written: inherent score

The level of a risk before any controls are applied. Ransomware's inherent score is 15 (likelihood 3 x impact 5).

Where the book teaches it