operational portfolio risk management