External data refers to any information that did not originate within your own organization. External data is a double-edged sword: it's plentiful, easy to obtain, often free, and, sometimes, can be used directly in risk assessments in varying areas. However, working with it is easily the most complicated part of the three-source model used in this book. Formats are all over the map (large data dumps, PDFs, glossy vendor reports, scraped news feeds, advertisements disguised as research), the reporting goals vary (regulatory compliance, marketing, peer-reviewed research), and the quality ranges from directly usable to "should never have seen daylight." Luckily for risk analysts everywhere, a lot has changed since the olden days of data gathering (the olden days are early 2025, of course). AI can now help you discover relevant sources, extract key statistics, and even assess data quality, turning what used to be a 30-hour research project into a focused 2-hour effort.