Too many people think about risks in terms of outside forces that can affect an organization. They worry about crooks and scam artists, customer demands, funder and stakeholder demand, natural disasters, and broad economic trends and forces. Yet most threats and opportunities are generated internally.