OPERATIONAL RISK, IT PROCESSES AND BUSINESS MANAGEMENT