The framework must be comprehensively and appropriately documented in board of directors approved policies and must include definitions of operational risk and operational loss.