Which term describes risk before any actions are taken?

Which term describes risk before any actions are taken?

• A. Operational risk
• B. Digital risk
• C. Inherent risk
• D. Calculated risk

Answer: (C)

The main idea being tested is the baseline level of risk that exists before any controls or actions are applied. This is the risk that comes from the nature of the business, its processes, and the external environment, before you do anything to mitigate it. That baseline is called inherent risk. It captures what could go wrong simply because the activity exists, without considering safeguards or policies. Understanding this helps because in risk management you first assess inherent risk, then implement controls to reduce it to residual risk. For example, in lending there is always some default risk because borrowers may not repay; this is the inherent risk before you apply credit checks or mitigations. After putting controls in place, the remaining risk is the residual risk. Why the other terms don’t fit: operational risk refers to risks arising from how processes, people, and systems operate, not specifically the initial baseline. Digital risk focuses on IT and cyber threats. Calculated risk means taking on risk after evaluating potential benefits and costs, not the initial, pre-action risk level.

The main idea being tested is the baseline level of risk that exists before any controls or actions are applied. This is the risk that comes from the nature of the business, its processes, and the external environment, before you do anything to mitigate it. That baseline is called inherent risk. It captures what could go wrong simply because the activity exists, without considering safeguards or policies.

Understanding this helps because in risk management you first assess inherent risk, then implement controls to reduce it to residual risk. For example, in lending there is always some default risk because borrowers may not repay; this is the inherent risk before you apply credit checks or mitigations. After putting controls in place, the remaining risk is the residual risk.

Why the other terms don’t fit: operational risk refers to risks arising from how processes, people, and systems operate, not specifically the initial baseline. Digital risk focuses on IT and cyber threats. Calculated risk means taking on risk after evaluating potential benefits and costs, not the initial, pre-action risk level.