The purpose of an external audit is to develop a finite list of opportunities and threats that should be avoided or mitigated. If you were running a business, how would you decide what opportunities and threats are important or significant enough to respond to or take action against?