Measuring and Managing Operational Risk: An Integrated Approach