4.8 Operational and Management Related Risk Identification