The Operational Risk Framework, which is supported by specific operational risk policies, sets out our approach to managing risks arising from inadequate or failed internal processes, people and systems, external events, IT risk and information security.