Implementing a Federated Approach to Operational Risk Management