Certified Ethical Hacker (CEH) v13 Practice Exam 2026 - Complete Test Prep

Inherent risk is the level of risk that exists before any security controls are applied. It represents the natural danger posed by the environment, threats, and vulnerabilities, and the potential impact if a breach occurs, assuming no safeguards are in place. This baseline helps you understand how much risk you would have to manage even before you start adding protections. The risk remaining after controls are applied is residual risk, not inherent risk. The risk from new technologies and the risk from external threats alone don’t capture the full baseline of danger present without controls, since inherent risk includes both internal weaknesses and external factors.