Complexities of operational risk: Flexible change, regulatory environment and technology risk