Don't take unnecessary risks, use operational risk management.