Supervision (BCBS) to introduce a capital charge for this risk as part of the new capital adequacy framework (Basel II). Definition The Basel Committee defines operational risk in Basel II and Basel III as: The Basel Committee recognizes that operational risk is a term that has a variety of meanings and therefore, for internal purposes, banks are permitted to adopt their own definitions of operational risk, provided that the minimum elements in the Committee's definition are included. Scope exclusions The Basel II definition of operational risk excludes, for example, strategic risk – the risk of a loss arising from a poor strategic business decision. Other risk terms are seen as potential consequences of operational risk events. For example, reputational risk (damage to an organization through loss of its reputation or standing) can arise as a consequence (or impact) of operational failures – as well as from other events. Basel II seven event type categories The following lists the seven official Basel II event types with some examples for each category: Internal Fraud – misappropriation of assets, tax evasion, intentional mismarking of positions, bribery External Fraud – theft of information, hacking damage, third-party theft and forgery Employment Practices and Workplace Safety – discrimination, workers compensation, employee health and safety Clients, Products, and Business Practice – market manipulation, antitrust, improper trade, product defects, fiduciary breaches, account churning Damage to Physical Assets – natural disasters, terrorism, vandalism Business Disruption and Systems Failures – utility disruptions, software failures, hardware failures Execution, Delivery, and Process Management – data entry errors, accounting errors, failed mandatory reporting, negligent loss of client assets Difficulties It is relatively straightforward for an organization to set and observe specific, measurable levels of market risk and credit risk because models exist which attempt to predict the potential impact of market movements, or changes in the cost of credit. These models are only as good as the underlying assumptions, and a large part of the recent financial crisis arose because the valuations generated by these models for particular types of investments were based on incorrect assumptions. By contrast, it is relatively difficult to identify or assess levels of operational risk and its many sources. Historically organizations have accepted operational risk as an unavoidable cost of doing business. Many now though collect data on operational losses – for example through system failure or fraud – and are using this data to model operational risk