management's identification and analysis of risk is an ongoing process and is a critical component of effective internal control. an important first step is for management to identify factors that may increase risk. identify at least five factors, observable by management, which may lead to increased risk in a typical business organization.