Management needs to comprehensively identify risks and should consider all significant interactions between the entity and other parties as well as internal factors at both the entitywide and activity level .
The internal factors are probably more within the entity 's control at all points .