In this article we describe a framework for structuring the operational risks within a business, based on risk policies that are already defined within the company. It gives an easy way of controlling the risks and assuring that the risk management procedures are up to date.