The internal auditor should consider external risk factors, including:
. technological obsolescence;
. the failure to adapt procedures to reflect the new regulatory framework or monitor its implementation;
. the failure to adapt to, and take account of, new markets, products or activities;
. the appearance of new frauds that have or could have negative effects on the
entity; and
. developing activities in areas of high risk.