Internal and external risks