A practical application of extreme value theory to operational risk in banks