The inherent risk is the risk to which the organization is exposed in the absence of measures taken to modify the occurrence or impact of this risk.