Quantification of Operational Risk: A Scenario-Based Approach