The document outlines a set of principles that provide a framework for the effective management and supervision of operational risk, for use by banks and supervisory authorities when evaluating operational risk management policies and practices. It updates the February 2003 Sound Practices for the Management and Supervision of Operational Risk.