In this paper, we propose a general modeling framework for operational risk management of financial firms. We consider operational risk events as shocks to a financial firm's value process, and then study capital investments in preventive and corrective controls to mitigate risk losses. The...