(a) The results of risk identification, measurement, and monitoring activities;

(b) Actions taken to control identified risks;

(c) Where relevant, any exposure thresholds that have been set for identified operational risks;

(d) An assessment of the effectiveness of the risk control tools that are used; and

(e) Actual operational risk losses or events against stated risk appetite or tolerance.