Mastering Operational Risk by Tony Blunden & John Thirlwell