Before documenting controls on the hospital EHR risk, what assessment step should the risk owner complete?
Select an answer to reveal the explanation.
Short Explanation
Inherent risk is the storm before the umbrella. Score how bad it looks without controls first — then talk about what the controls buy you.
Full Explanation
Inherent risk assessment evaluates likelihood and impact before control consideration. That baseline is required to understand control value and residual risk later. Skipping to residual-only, accepting without scores, or retiring without assessment breaks the lifecycle.