Assess and examine your operational risk and effectiveness of your controls.