I have been reading a lot of posts on many different risk forums of late and it appears that the Frequency x Magnitude argument for measuring operational risk, is a stubborn pandemic and a failing that is going to be nearly impossible to move on from.
How do we really measure operational risk?