The factors include: competition, information systems using IT, compliance, the social and political situation, operational, image and reputational risk, ethical conduct towards stakeholders and the environment.