Convictions, Conventions and the Operational Risk