.g. , fraud , legal and compliance risks or damage to physical assets ) . the company may incur operational risk across the full scope of its business activities , including revenue-generating activities ( e.g. , sales and trading ) and control groups ( e.g. , information technology and trade processing ) . legal , regulatory and compliance risk is included in the scope of operational risk and is discussed below under 201clegal , regulatory and compliance risk