This framework addresses the risk of loss or damage to the firm’s reputation as a result of inadequate or failed processes, people and systems or from external events such as fraud, legal and compliance breaches or damage to physical assets.