32.5 Operational risk
Operational risk is the risk of direct or indirect loss arising from inadequate or failed internal processes, systems failure, human error, fraud or external events. When required controls fail, operational risks can cause damage to reputation, have legal or regulatory implications, or lead to financial loss. While the Group cannot expect to eliminate all operational risks, through a control framework and by continuous monitoring and responding to potential risks, the Group is able to manage these risks. Controls include effective segregation of duties, appropriate access, authorisation and reconciliation procedures, staff training and robust assessment processes. The processes are reviewed by risk management and internal audit on an ongoing basis.