12.5. Risk management of operational incidents