Operational Risk The Operational Risk Department (ORD) is responsible for the firm’s operational risk framework, including governance, policies, training, assessments, risk tolerance, information risk oversight and supplier risk management.