Design operational risk reporting framework