in addition, in order to promote effective management of this risk, four practices were put in place: risk and control self-assessment, data collection on operational losses, risk indicators and measures, and the implementation and follow-up of remedial measures.