Our Operational Risk Framework defines our approach to the identification, assessment, management and reporting of operational risks and associated controls across the business including IT, data and outsourcing arrangements.