Internal and external techniques of risk management