An effective Operational Risk program protects information and other assets by ensuring the confidentiality, integrity, and availability of the data through the use of people, processes and technology organized within a process of continuous improvement.