Nov 8, 2018
The risk level or exposure that exists before any actions (e.g., implementing controls) are taken, or might be taken, to mitigate the risk.