Internal risks are those that your business has some level of control over, while external risks are those driven by events upstream or downstream in the supply chain.