Seol mar théacs é seo: Measuring operational and reputational risk