Credit institution\’s operational risk should be evaluated by the external auditor cautiously because it is a risk arising from the way in which the bank\’s global strategy is implemented in practice and how the bank’s activity is followed step by step by those charged with governance, internal audit and internal control so to indicate any deviation from the standard rules and procedures and reduce the likelihood of distortions caused by frauds or errors.

International Standards on Auditing require to external auditors to obtain sufficient and appropriate evidences to support the audit opinion, therefore the auditor must first understand the specific banking activities and then identify and properly evaluate the credit institution\’s operational risks.