Operational risk should be integrated in a framework easily understandable by stakeholders and not just a regulatory compliance check. Operational risk models should produce meaningful output and be a part of an 'end to end' integrated process. What are the key criteria for effective implementation? What insights can be provided? How important are responses in operational risk? How important is operational risk to ERM?