A risk analyst is documenting a new risk in the organization's risk register. The analyst has identified the threat, mapped the affected assets, and now must record the level of risk that would exist assuming NO controls are in place. Which risk value should the analyst record for this field?