Operational risk is the potential for loss caused by failed internal processes, systems, people, or external events. Strategic risk and reputational risk are not part of operating risk.