Operational Risk Management in Banks and Idiosyncratic Loss Theory