. . " technology, process infrastructure, personnel, and other risks having an operational risk impact." . . .