Operational risks and financial institutions