The web search results provide general definitions and context regarding operational risk, noting that it covers losses from flawed processes, policies, or events. While the specific comparison ('as damaging as market, governance, or credit risk') is from the original article, the evidence confirms that operational risk is a major, recognized category of risk that must be managed alongside others, supporting the core premise of the claim.

Two web search results directly address the preventability of control failures. One explicitly states that control failures, including inadequate segregation of duties and lack of independent verification, 'are often preventable.' Another suggests that with a strategic approach, failures can shift from 'damage control to value creation,' implying preventability or foreseeability.

The web search results suggest the concept of intentional design in governance architecture. One result mentions that 'governance architecture is part of the funding decision' in a specific context, and another contrasts 'Intentional Architecture' with 'Emergent Design,' supporting the idea that the structure is deliberately designed.