A credit institution must establish a management framework of the operational risk. This framework must cover the appetite and tolerance to the operational risk of a credit institution, in accordance with the management policies of this risk, including the measure and method in which the operational risk is transferred outside the credit institution. The management framework of the operational risk should include policies and processes for the identification, assessment, monitoring and control/diminishing of the operational risk.