MANAGING OPERATIONAL RISK IN FINANCIAL INSTITUTIONS