Operational Risk Assessment and Control: a Probabilistic Approach