While there is always a tendency to classify operational risk in neat categories such as fraud (internal and external), workplace safety, damage to physical assets, exposure resulting from business practices, and the like, Figure 2.1 suggests that the domains where op risk can be found are much broader. is figure brings to the reader’s attention the three main groups of operational risk that are present in practically every organization.