If you're going to have a fighting chance of being successful then you need to start with a good problem statement.
You can't think about operational risk without thinking about cyber risk.
Measuring and comparing various cyber risk events on an apples to apples basis.
We assure you of our best service and intentions at all times. We want you to know that we are on your side, cheering for you and it is clearly to our advantage when you do well.