This paper describes the use of Bayesian networks (BNs) to model the operational risk to information technology (IT) infrastructure in financial and other institutions. We describe a methodology for modeling financial losses that might result from operational risk scenarios involving data...