An assessed level of raw or untreated risk. It’s the natural level of risk inherent in a process or activity without doing anything to reduce the likelihood or mitigate the severity of a mishap, or the amount of risk before the application of the risk reduction effects of controls. It’s the most amount of potential risk an engagement could pose.