Inherent risk = the amount of risk that exists in the absence of controls. In other words, before an organization implements any countermeasures at all, the risk they face is inherent risk. Residual Risk = the risk that remains after controls are acc...