What risks are we worried about?
A year's losses are over your tolerance from €684k up
Failed IT change or update takes core systems down is the biggest risk: 43% of the expected loss. Expected loss is €1.2M a year in total. 11% of years pass your once-in-20-years limit (€3M); you accept 5%.