# What is the difference between inherent risk and residual risk?

**URL:** <https://www.amlfaqs.com/t/what-is-the-difference-between-inherent-risk-and-residual-risk/168>\
**Category:** UAE\
**Created:** [October 8, 2024, 1:01am UTC](https://www.amlfaqs.com/t/what-is-the-difference-between-inherent-risk-and-residual-risk/168 "2024-10-08T01:01:51Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ramshi](https://yyz2.discourse-cdn.com/flex010/user_avatar/www.amlfaqs.com/ramshi/32/47_2.png) [@Ramshi](https://www.amlfaqs.com/u/Ramshi)\
**Post date:** [October 8, 2024, 1:01am UTC](https://www.amlfaqs.com/t/what-is-the-difference-between-inherent-risk-and-residual-risk/168/1 "2024-10-08T01:01:51Z")

</div>

Could you please explain little clarity about Inherent Risk and Residual Risk?

---

<div class="post-metadata">

**Author:** ![pathik](https://yyz2.discourse-cdn.com/flex010/user_avatar/www.amlfaqs.com/pathik/32/5_2.png) [@pathik](https://www.amlfaqs.com/u/pathik)\
**Post date:** [October 8, 2024, 1:13am UTC](https://www.amlfaqs.com/t/what-is-the-difference-between-inherent-risk-and-residual-risk/168/2 "2024-10-08T01:13:14Z")

</div>

There is no such thing as ZERO risk. Regardless of their size, industry, or location, all organisations are exposed to various ML/TF risks. These risks are inherent and unavoidable. While the likelihood and impact of these risks may vary, they are always present, which is why they are often referred to as “Gross Risks” – risks that exist without any controls in place.

To mitigate these risks, organisations implement various controls, leaving behind what is known as residual or net risk.

To summarise:

- **Inherent Risk = Gross Risk = Risks without controls**
- **Residual Risk = Net Risk = Risks after controls**

For example, inherent risk is the level of risk present before controls such as policies and procedures, KYC, and sanctions screening are implemented. Residual risk is the remaining risk after these measures are in place.

For a more detailed understanding of the risk-based approach, read this article:

> **[The Risk Based Approach to AML - Anti-Money Laundering Compliance](https://amluae.com/the-risk-based-approach-to-aml-compliance/)**
>
> Acceptance of the existence of risk is the first thing that actually matters when it comes to the principles of the Risk Based Approach to AML.

---

<div class="post-metadata">

**Author:** ![Ramshi](https://yyz2.discourse-cdn.com/flex010/user_avatar/www.amlfaqs.com/ramshi/32/47_2.png) [@Ramshi](https://www.amlfaqs.com/u/Ramshi)\
**Post date:** [October 8, 2024, 6:01am UTC](https://www.amlfaqs.com/t/what-is-the-difference-between-inherent-risk-and-residual-risk/168/3 "2024-10-08T06:01:44Z")

</div>

Thank you so much for the crystal-clear clarification.  
Adv Ramshad