Methodological Framework for Operational Risk Assessment