The two types of risk are inherent risk and residual risk. Inherent risk refers to the level of risk before any control measures are implemented, while residual risk is the level of risk that remains after control measures are in place.