RCSA, loss data collection, scenario analysis, and KRI monitoring — provides the management infrastructure for operational risk identification, assessment, and oversight.