Three categories of project portfolio risks include: external business risks (industry disruption, mergers and acquisitions, economic conditions, political environments, regulatory changes, new legal requirements, natural events such as COVID-19), internal business risks (such as operational challenges, leadership and organizational changes, weak portfolio governance, and company financial health), and execution related risks (major project risks that impact two or more other projects, project dependencies, limited resource capacity, and weak project management standards).