The seven operational risk loss event groups recommended by the Basel Committee are:
- Internal Fraud
- External Fraud
- Employment Practices & Workplace Safety
- Clients, Products, & Business Services
- Damage to Physical Assets
- Business Disruption & System Failures
- Execution, Delivery, & Management Process
However there are alternative classifications:
- Employee: loss events resulting from the actions or inactions of a person who works for a firm.
- Business Process: loss events arising from a firm’s execution of business operations.
- Relationships: loss events caused by the connection or contact that a firm has with clients, regulators, or third parties. This category focuses on the interaction between a firm and other entities; relationship risks involve both parties.
- Technology: loss events due to piracy, theft, failure, breakdown, or other disruption in technology, data or information; this category also includes technology that fails to meet the intended business needs.
- External: loss events caused by people or entities outside a firm; the firm cannot control their actions.
I'm sure there are more..