Operational risk management in banks and internal audit function role in operational risk management