Deakstadieđáhus: Measuring operational and reputational risk