Operational Risk The Operational Risk Management (ORM) unit has the responsibility to design, specialize and implement the policies of the ORM framework, in accordance with the Group’s Risk Appetite Framework as approved by the BoD, and in compliance with all regulatory and supervisory requirements.