Operational risk management framework for startups