The gross risk rating is a combination of the likelihood of the risk happening and the impact should no mitigating actions be taken. | The net risk rating is a combination of the likelihood of the risk happening and the impact once the mitigating actions have been taken. |