固有风险(Inherent risk)是风险管理中的词语,是在未进行风险控管措施之前的风险[1][2]。另一种固有风险的定义是:在使用既有不完整或不尽理想的风险控管方式后,风险的程度[3][4]

参考资料 编辑

  1. ^ Gregory Monahan. Enterprise Risk Management: A Methodology for Achieving Strategic Objectives. John Wiley & Sons. 2008 [2020-06-02]. ISBN 9780470372333. (原始内容存档于2019-12-15). 
  2. ^ Rachel Slabotsky. Inherent Risk vs. Residual Risk Explained in 90 Seconds. www.fairinstitute.org. FAIR Institute. 7 September 2017 [10 October 2018]. (原始内容存档于2020-04-02). Inherent risk represents the amount of risk that exists in the absence of controls. 
  3. ^ Rachel Slabotsky. Inherent Risk vs. Residual Risk Explained in 90 Seconds. www.fairinstitute.org. FAIR Institute. 7 September 2017 [10 October 2018]. (原始内容存档于2020-04-02). Inherent risk is current risk level given the existing set of controls rather than the hypothetical notion of an absence of any controls. 
  4. ^ Jack Jones. Measuring and Managing Information Risk: A FAIR Approach. FAIR Institute.