In most frameworks inherent risk and gross risk mean the same thing: the level of risk before controls are applied. Both contrast with residual or net risk, which is the exposure remaining after mitigation. The terminology varies by framework, but the underlying concept is identical.
