Assess operational risk in business processes