A centralised database is used to record the results of the operational risk management process. Operational risk and control self-assessments are input and maintained by business units. Business and functional management and Business Risk and Control Managers monitor the progress of documented action plans to address shortcomings. To ensure that operational risk losses are consistently reported and monitored at Group level, all Group companies are required to report individual losses when the net loss is expected to exceed US$10,000, and to aggregate all other operational risk losses under US$10,000. Losses are entered into the Group Operational Risk database and are reported to the Risk Management Meeting on a monthly basis.