manaGinG operational riSK We have established an operational risk governance framework including policies and procedures, risk assessments, risk tolerance, information risk oversight, supplier risk management and training.