Anfonwch hwn fel neges destun: Measuring operational and reputational risk