What is Inherent vs. Residual Risk?
Inherent risk is exposure before any controls; residual risk is what remains after mitigations. The gap between them is your control environment made visible — and residual risk is what gets compared against risk appetite.
Related terms
See Compriska in action
A 30-minute walkthrough of the platform, tailored to your frameworks and industry.
Book a demo