BY: Indra Mendoza, Global Standard Auditor. Every organization, regardless of whether it is small or large, faces external and internal factors that take away certainty from the possibility of achieving its objectives. This effect of lack of certainty is a risk, and it is inherent to all activities (Kevin W. Knight, 2009).