
92 Operational Risk and Resilience
Designing and implementing operational controls
E x p o s u re to operational risks can be reduced to acceptable levels
by the implementation of risk improvement measures and con-
t rols. Risk improvement measures are strategic or operational
c o n t rols applied to the business processes, based upon the impor-
tance of the process and associated data to the business and the
value of the actual impact loss. Most import a n t l y, contro l s
should be aligned with an org a n i z a t i o n ’s business objectives.
An additional constraint is likely to exist in reality, which is the
budget available to implement controls. ...