A New Approach for Managing Operational Risk