Operational Risk: Emerging challenges and sound practice