Also called the inherent index, inherent risk is the threat a certain risk poses to the organization before mitigation activities are considered.