"Software-bugs are part of the Operational Risk and can only be dealt with through procedural changes. They are certainly not quantifyable, unless you assign ratings to different severities (ie. severity of a report-column header being wrong vs…"