The enterprise risks were categorized as an external, operational or strategic risk. External risks emerge from outside the organization, operational risks arise from within the organization, and strategic risks are associated with our strategic initiatives. The identified risks can significantly affect the Association’s finance, relevancy and reputation if mitigations are not in place.