Licensees that do not adequately describe and classify operational risk and loss exposure may significantly reduce the effectiveness of their framework.