external risks