operational risk in asset management