The absolute risk indicates the risk to which the organization is exposed in the absence of measures taken to modify occurrence probability or impact of this risk.

The absolute risk is computed as a function of likelihood and severity with a matrix (the matrix of absolute exposure). It can also take into account the level of confidence given to these values.

 

Note: This characteristic is computed by the "Risk Level Absolute Matrix" macro that can be modified.