Risks can be categorized as external and internal. If a risk to the project arises due to an aspect being dealt with by the project team, then it is an internal risk. All other risks are external risks. Suppose a project is to be coded using a particular programming language, and one developer on the team is not conversant with it. In this case, he is given training so that he can pick up this language. However, if even after training, this team member is not able to use the programming language, he will not be able to do the task assigned to him, and his inability will be considered an internal risk. Now, suppose that this particular training is not available from any training service provider, then in that case, the risk becomes an external risk (Figure 4.2).