Systems disruptions are an example of an external cause of information security risk. External causes of information security risks are factors that originate outside of the organization but can still impact the confidentiality, integrity, and availability of information and systems.