United Kingdom · Operations · Principal/Manager (12-16 years)

Operational Risk Manager

Here is the whole job, in plain words. What it is, what you decide, how you're judged, how people get here and where they go next. Then the part no course gives you: twelve AI tutors who learn your work.

See how AI is changing this job, and get the full read by email.

As an Operational Risk Manager, a good place to start on AI Ethics & Governance for Risk is Planning Automation Across a Department, a free Future Fluency module at Level 5. You'd practise working out what in your department's work could be automated, what should not be, and what to recommend.

Free to start, no card.

Keep this job description

Where should we send it?

One email: what AI is changing in this job, the new skills it asks for, where it leads, and where to start free. With a link back here. Nothing else follows unless you confirm your address.

Your employer, or 'self-employed'

Leading a team? Try this with up to five of them for 14 days, free.

  • Experience bandPrincipal/Manager (12-16 years)
  • Direct reports3-5 reports
  • Reports toDirector of Operations
  • UK framework levelUsually a manager, or the deepest specialist in a team

Also advertised as Head of Operational Risk · Risk & Control Manager · Senior Manager, Operational Resilience

Built on 43,079 real UK job descriptions we analysed · grounded in what real qualifications cover

1From this job to a course

The qualifications matched to this job

NQual Level 5 Diploma in Leadership and Management NQual · Level 5 · covers 3 of 16 standards
CMI Level 5 Award in Management and Leadership Chartered Management Institute · Level 5 · covers 3 of 16 standards
CMI Level 5 NVQ Diploma in Management and Leadership Chartered Management Institute · Level 5 · covers 1 of 16 standards
CMI Level 5 Certificate in Police Management Chartered Management Institute · Level 5 · covers 1 of 16 standards
BIIAB Level 5 Diploma in Management and Leadership (NVQ) BIIAB · Level 5 · covers 1 of 16 standards
Highfield Level 5 Diploma in Operations Management Highfield Qualifications · Level 5 · covers 1 of 16 standards

Matched from the standards this job is measured against: a suggestion, not an official ruling.

The units you would start with

Risk management NQual Level 5 Diploma in Leadership and Management
Managing Risk CMI Level 5 Award in Management and Leadership
Develop and implement an operational plan CMI Level 5 NVQ Diploma in Management and Leadership
Operational Planning Highfield Level 5 Diploma in Operations Management

The future skills this job leans on

AI Fluency working with AI as a thinking partner
Data Fluency turning numbers into a decision
AI Governance Fluency using AI responsibly
Foresight Fluency seeing round the corner
Trust Fluency keeping the digital world safe
Your Plan Illustration

Built for Operational Risk Manager

4 units that map to this job, from the qualifications that cover it.

  1. Risk management NQual · covers 3 of 16 standards Level 5
  2. Managing Risk Chartered Management Institute · covers 3 of 16 standards Level 5
  3. Develop and implement an operational plan Chartered Management Institute · covers 1 of 16 standards Level 5
  4. Operational Planning Highfield Qualifications · covers 1 of 16 standards Level 5
These are the real units behind this job, in the order they rank for it. Nothing here is marked done, because this plan has not been started by anyone yet. Yours would fill in as you go.

2AI and this work

Will AI change your work as an Operational Risk Manager?

Nobody can say exactly how. Here is what this job is being asked for next, and where to start.

The new skills this role is being asked for

  • AI Ethics & Governance for Risk
  • Advanced Scenario Planning & Stress Testing
Why each one is rising

The future skills this job leans on

We'll only ever tell you what we can actually back up. No hype, no scare tactics.

What happens when you start

Next, a free account. We build your Operational Risk Manager plan as you set up, starting with the free Automation Fluency module. No card.

Your first Future Fluency module is free. After that, your AI tutor is £70 a month.

Keep this read. One email with what AI is changing in this job, the new skills it asks for and where to start free. Nothing else follows unless you confirm your address.

3What this role really is

An Operational Risk Manager spots potential problems before they cause harm, and builds the systems to manage them.

4What you'd actually use

The tools this job runs on, and how well you'd need to know each one.

ServiceNow GRC / Archer / LogicGate (GRC Platform) Strategic

Leading platform selection/migration, defining the enterprise GRC data model, and integrating the GRC platform with other enterprise systems (e.g., HRIS, ERP) to ensure a holistic view of risk.

Microsoft Visio / Lucidchart / Signavio (Process Mapping) Architect

Establishing enterprise-wide process mapping standards and a central process library. Using process mining tools to identify systemic control weaknesses and opportunities for automation.

Power BI / Tableau (BI & Analytics) Strategic

Governing the BI environment for risk reporting. Defining the semantic layer and ensuring data integrity for executive-level risk dashboards (e.g., on Tableau Server) presented to senior leadership.

Advanced Excel (Power Query, Pivot Tables, VBA) Strategic

Designing and auditing complex Excel models used for risk quantification or scenario analysis, often as precursors to system implementation. You'll be the one validating the integrity of these critical tools.

Confluence / SharePoint (Collaboration & Knowledge Management) Strategic

Setting the enterprise strategy for knowledge management related to risk and compliance, ensuring a single source of truth for policies, procedures, and risk documentation across the organisation.

5What you get to decide, and how that grows

Power in a job isn't your title. It's what you're allowed to decide. Here's how it grows as you move up.

The choiceComing in Where you are nowThe step above
Operational Risk Framework Design Follows established framework, suggests minor improvements to supervisor. Proposes updates to specific framework components, gets manager approval. Designs and implements new framework components, gets manager sign-off on major changes.
Risk Remediation Prioritisation Executes assigned remediation tasks. Prioritises own remediation tasks within agreed timelines, escalates conflicts. Negotiates remediation timelines with business units, makes recommendations for prioritisation to manager.
Team Hiring & Performance No hiring authority. Focuses on own performance. No hiring authority. Provides informal feedback to peers. Interviews junior candidates, provides formal feedback to mentees, makes recommendations on performance.
Budget Allocation (Operational Risk) No budget authority. Reports on expenses. No budget authority. Requests resources for specific tasks. Manages small project budgets (up to £5K). Recommends larger spend to manager.

6How you'll be judged

The scoreboard, and what is not on it. The hard targets, how often each is actually looked at, and the quiet signals that never reach a dashboard.

Reduction in Operational Loss Events
The number of significant incidents that result in a financial or non-financial loss.
Target · Reduce annual operational loss events by 10% year-on-year for high-severity categories.

In Q2, we had 12 high-severity loss events. Your target would be to bring that down to 10 or fewer in Q2 next year, through better controls and proactive risk management.

Timeliness of Risk Remediation
The percentage of identified risk findings and control weaknesses that are remediated (fixed) within their agreed-upon deadlines.
Target · Achieve 90% or higher completion rate for all high-priority remediation actions by their due dates.

If we identify 20 high-priority control weaknesses in a quarter, you'll need to ensure at least 18 of them are fully resolved and closed out on time.

Control Effectiveness Score
An aggregate score reflecting the design and operating effectiveness of key operational controls, often based on RCSA results and control testing.
Target · Increase the average control effectiveness score across critical processes by 5 percentage points annually.

If the average effectiveness score for our payment processing controls was 75% last year, your goal would be to push that to 80% this year by improving control design or execution.

Team Engagement & Development
How well your direct reports are performing, growing, and staying motivated.
Target · Maintain an average team engagement score of 4.0/5.0 and ensure 100% of direct reports have clear development plans with measurable progress.

Your team's last engagement survey showed an average of 3.8. You'd work to get that up to 4.0, perhaps by improving feedback loops or offering more training opportunities.

Risk Culture & Awareness
How well the business units understand, own, and act on their operational risks.
  • Business unit leaders proactively raising new risks or control concerns. Risk considerations consistently included in new project proposals. Positive feedback from internal audit and regulators regarding the maturity of our risk culture. You're seen as a partner, not just the 'risk police'.
Framework Maturity & Robustness
The overall quality, completeness, and effectiveness of our operational risk management framework (policies, procedures, tools).
  • Our framework aligns well with industry best practices (e.g., COSO, ISO 31000). Auditors consistently give positive feedback on its design. It's easy for business units to use and understand. You've successfully integrated new risk types or methodologies into the framework.
Stakeholder Trust & Influence
How effectively you build relationships and influence senior leaders to make risk-informed decisions.
  • You're regularly invited to strategic planning meetings. Senior leaders seek your opinion on complex operational decisions. You can articulate risk in a way that resonates with commercial objectives, leading to appropriate investment in controls. You successfully challenge assumptions without damaging relationships.
Team Leadership & Development
Your ability to lead, mentor, and develop a high-performing operational risk team.
  • Your team members feel supported and challenged. They're growing in their capabilities and taking on more complex work. You're effective at delegating and empowering them. You handle performance issues fairly and constructively, and your team has a clear sense of purpose.

7Would you like it

Both sides. What people enjoy, and what grinds them down.

What people enjoy
Building a Robust System

You'll get a real kick out of designing and implementing new risk frameworks, policies, and processes that genuinely improve our resilience. Seeing a messy, inconsistent approach transform into a clear, effective system will be deeply satisfying.

Successfully rolling out a new KRI programme that gives early warning signals, replacing a reactive incident reporting system.

Developing and Leading a Team

You'll thrive on mentoring your team, helping them grow their skills, and seeing them take ownership of complex risk challenges. Their success will be your success, and you'll enjoy coaching them through difficult situations.

Watching a junior analyst you've mentored confidently present a complex risk assessment to a business unit head.

Protecting the Organisation

There's a deep satisfaction in knowing your work directly contributes to safeguarding the company from significant losses, regulatory fines, and reputational damage. You're the guardian, and that sense of responsibility drives you.

Identifying a critical control gap that, once fixed, prevents a potential £500K fraud incident.

What frustrates people
  • The 'No Police' Perception: Constantly battling the reputation of being the unit that only says 'no' instead of being seen as a partner.
  • The End-of-Quarter Chase: Spending the last two weeks of every quarter relentlessly chasing business managers to complete their mandatory RCSA updates.
  • 'Paper' Controls: The soul-crushing discovery that a critical control you've been reporting as 'effective' for a year only exists in a procedure manual and is never actually performed.
  • Remediation Limbo: Watching a critical risk remediation plan get de-prioritised for the third consecutive quarter in favour of a new product feature.
  • Accountability Hot Potato: When an incident occurs, everyone points fingers, and your job is to diplomatically conduct a post-mortem to assign ownership without being thrown under the bus.
What this role does not give you
  • Instant gratification or quick wins on every project. Risk management is a long game.
  • A purely technical role where you're just heads-down in data. You'll be spending a lot of time with people.
  • A static, predictable environment. Risks evolve, and so will your challenges.
  • Universal popularity. Sometimes, you'll have to deliver unpopular messages for the good of the organisation.

8Who you work with

This role directly protects the organisation from significant financial, reputational, and regulatory harm. You'll set the tone for how we think about and manage operational risk across multiple departments, influencing strategy and ensuring we can scale safely. Your work directly impacts our P&L by preventing losses and ensuring compliance, which in turn supports our long-term growth and investor confidence.

Inside the business
  • Director of Operations
  • Heads of Business Units (e.g., Customer Service, Logistics, Finance Operations)
  • Internal Audit team
  • Legal & Compliance
  • Product Development leadership
Outside the business
  • External auditors (e.g., Big Four firms)
  • Regulators (e.g., FCA, PRA, ICO, depending on industry)
  • Key vendors and third-party suppliers
  • Industry peer groups for best practice sharing

9What you need before you start

Not a wish list. The things you would be expected to already have.

  • Proven experience (at least 5-8 years) leading significant operational risk workstreams or projects within a complex organisation.
  • Demonstrable experience managing and developing junior team members, including performance reviews and coaching.
  • A track record of successfully influencing senior stakeholders and driving risk mitigation initiatives across multiple departments.
  • Expert-level understanding and practical application of a major risk management framework (e.g., COSO, ISO 31000).
  • Experience in designing and implementing KRIs/KCIs that provide genuine insights, not just vanity metrics.
  • Strong analytical skills, including advanced Excel and BI tool proficiency, for complex risk data analysis and reporting.

10What to practise next

Where the job is going, and what to do about it starting this week.

Risk Data Architecture & Governance

As our GRC platforms become more sophisticated, you'll need to define the data model, ensure data quality, and govern how risk data flows across the organisation. This moves beyond just pulling reports to designing the underlying data infrastructure.

Data lineage and data ownership for risk metrics · Master data management for risk entities (e.g., co · Data quality frameworks and validation rules · Integration strategies between GRC, ERP, and other · Designing a 'single source of truth' for risk data

  • This quarter: Work closely with our IT/Data team to understand our current data architecture.
  • Next quarter: Map out the key data flows for our RCSA and incident management processes.
  • Month 4-6: Identify 2-3 critical data quality issues and propose solutions.
  • Month 7-9: Develop a proposal for how our GRC platform could better integrate with other core business systems.

Quick win: Document the data sources and transformations for your most important KRI. You'll quickly see where the gaps are.

Process Mining & Automation for Controls

Manual process mapping is time-consuming. Process mining tools can automatically discover, monitor, and improve processes based on event logs. This allows for data-driven identification of control weaknesses and opportunities for automation, leading to more efficient and effective controls.

Event logs and process discovery algorithms · Conformance checking (actual vs. ideal process) · Bottleneck identification and root cause analysis · Identifying automation opportunities for controls · Measuring control effectiveness through process da

  • This quarter: Research leading process mining tools (e.g., Celonis, UiPath Process Mining).
  • Next quarter: Identify one core operational process where we have good event log data (e.g., customer onboarding).
  • Month 4-6: Work with a vendor or internal expert to run a small pilot process mining exercise on that process.
  • Month 7-9: Present findings on control effectiveness and automation potential from the pilot to leadership.

Quick win: Watch some YouTube tutorials on process mining basics. It's a fascinating area that will fundamentally change how we understand operations.

11Staying current once you are in

What people here do to keep up
  • Regularly attending industry conferences and webinars on operational risk, regulatory changes, and emerging technologies (e.g., AI in risk).
  • Participating in peer networking groups or professional associations to share best practices and stay abreast of industry trends.
  • Undertaking continuous learning through online courses or executive education programmes in areas like leadership, data analytics, or cybersecurity risk.
  • Mentoring junior professionals in the risk field, which reinforces your own knowledge and leadership skills.

12The rising capability

The rising capability

Zavmo analysis

What's rising in its place

This is where the work is heading, and the higher pay with it. Get fluent here and the shift stops being a threat and starts being your edge.

AI Ethics & Governance for Risk

As we increasingly use AI for automated control monitoring, incident analysis, and regulatory scanning, understanding the ethical implications and governance requirements becomes critical. Regulators are already looking at 'AI risk,' and we need to be prepared.

  • Algorithmic bias and fairness in risk models
  • Explainable AI (XAI) for auditability of AI-driven
  • Data privacy and security in AI applications
  • AI model validation and performance monitoring
  • Establishing an AI governance framework for risk m

Advanced Scenario Planning & Stress Testing

Traditional risk assessments often focus on what's happened before. The future demands we anticipate 'black swan' events and understand our resilience to extreme but plausible scenarios (e.g., major cyber-attack, prolonged supply chain disruption). Regulators are pushing for this, too.

  • Developing plausible severe but not impossible sce
  • Quantifying impact across multiple risk categories
  • Identifying interdependencies and cascading failur
  • Reverse stress testing (what would break us?)
  • Integrating scenario results into strategic decisi

13What you’ll use

What you’ll use

Skills this role draws on

Technical

  • Risk & Control Self-Assessment (RCSA) Programme Management
  • KRI/KCI Framework Design & Implementation
  • Advanced Root Cause Analysis (RCA) & Incident Management
  • Business Process Mapping (BPMN) & Optimisation
  • Control Effectiveness Testing Strategy
  • Enterprise Risk Framework Application (COSO, ISO 31000)

14The pathway

The pathway

How you actually get there, here

How you become one varies far more by country than what one does. This is the UK route. Most people take one of these ways in; the right one depends on where you're starting from.

  1. 1

    Senior Operational Risk Analyst / Specialist (L3/L4)

    5-8 years of experience, including 2-3 years at Senior/Lead level

    Skills to master

    • Deep expertise in RCSA facilitation, KRI development, incident investigation, strong stakeholder engagement, and initial team mentoring. You'd be owning significant workstreams and starting to influence others.

    You're ready to move on when

    • Consistently delivers high-quality risk assessments and remediation plans independently.
    • Successfully leads cross-functional risk projects without constant supervision.
    • Receives positive feedback on mentoring junior colleagues.
    • Demonstrates ability to present complex risk issues clearly to mid-level management.
  2. 2

    Internal Audit Manager (from a 3LOD function)

    Roughly 8-12 years in internal audit, with a focus on operational audits

    Skills to master

    • A very strong understanding of control design and effectiveness, audit methodologies, and regulatory expectations. You'd need to shift from an assurance mindset to a more proactive risk management and advisory role.

    You're ready to move on when

    • Proven track record of identifying significant control weaknesses and driving remediation.
    • Excellent understanding of business processes and inherent operational risks.
    • Strong ability to influence business owners to improve control environments.
    • Desire to move from 'checking' to 'building' and 'owning' the risk framework.
  3. 3

    Operations Manager (from a highly regulated operational area)

    10-15 years in a front-line operations management role, particularly in regulated industries

    Skills to master

    • Deep, practical understanding of operational processes, inherent risks, and the challenges of embedding controls in day-to-day work. You'd need to develop expertise in risk frameworks, methodologies, and reporting standards.

    You're ready to move on when

    • Demonstrated success in managing operational teams and improving efficiency/quality.
    • Strong awareness of regulatory requirements impacting their operational area.
    • Proactive in identifying and mitigating risks within their own department.
    • A clear desire to specialise in risk management and apply their operational insights at a broader level.

15Where this role leads

The long view: This work can lead into senior risk leadership, such as Chief Risk Officer, or into wider operational leadership as Chief Operating Officer or Head of Compliance.

16Pay and demand

Pay & demand

The figure is the median for full-time employees in the ONS occupation this job title codes to (Business and financial project management professionals), from the April 2025 survey, about six months old when published, as ASHE always is. It is that occupation's middle, not this role's. Half earn more.

The ten Future Fluencies

Zavmo analysis

The credential is what you can do today. These are what keep you valuable.

A qualification proves you can do the job as it's defined today. These ten are what decide whether you're still the obvious person for it in five years. They're the capabilities employers are now writing into senior roles faster than people are learning them. Zavmo weaves them through whatever you study, so you come out with both: the credential and the fluency.

The highlighted ones are the Fluencies your role leans on hardest, from how Operational Risk Manager is actually changing.

How you would learn this

One to one, on the work you already do

A tutor sets the task against your own job and marks the reasoning, at your pace. There is no cohort to fall behind.

A lesson from Risk management, worked against Operational Risk Manager.

Risk management Level 5

Applied to your work in Operational Risk Manager

This unit aims to equip learners with a thorough understanding of the principles and importance of risk management within an organisation. Learners will be able to identify, assess, control, and mitigate different types of risks, and understand the importance of monitoring and reviewing risk management strategies to achieve organisational objectives.

How the thinking builds
  1. 1 Remember
  2. 2 Understand
  3. 3 Apply
  4. 4 Analyse
  5. 5 Evaluate
  6. 6 Create
An illustration of a Zavmo lesson, built from this role’s own route. The unit, its objective and every criterion above are the awarding body’s own words, not an example.

It is £70 a month, billed monthly. Your free first module is Future Fluency, and you can cancel any time.

See Your Progress Grow Illustration
Operational Risk Manager
  • Risk & Control Self-Assessment (RCSA) Programme Management
  • KRI/KCI Framework Design & Implementation
  • Advanced Root Cause Analysis (RCA) & Incident Management
  • Business Process Mapping (BPMN) & Optimisation
  • Control Effectiveness Testing Strategy
  • Enterprise Risk Framework Application (COSO, ISO 31000)
This is your Mind Palace on learn.zavmo.ai. Every skill above comes from this role's own record, not an example borrowed from another job. A node lights up when you evidence it, and what you build stays yours between jobs. That is the part a course cannot do.

17The detail, folded away

Everything else the record holds

The career branches in full, how AI is already showing up in the day-to-day, and the questions people ask about this job. Here when you want them, out of the way while you decide.

Where it leads next, rung by rung

Where it leads

The career path, and where it branches

Operational Risk Manager is a start, not a ceiling. Each step below asks for new skills and hands back more autonomy.

  1. Director of Operational Risk (L6)

    3-5 years in the Manager role

    You'd move from owning the framework for a department to setting the operational risk strategy for an entire business unit or division. Your P&L responsibility would increase significantly (e.g., £2M-£10M+), and you'd have more direct interaction with the C-Suite and external regulators.

    • Defining enterprise-wide risk appetite and tolerance statements
    • Overseeing multi-year operational resilience programmes
    • Leading significant regulatory change programmes impacting risk
    • Integrating operational risk with other risk types (e.g., credit, market risk)
  2. Head of Internal Audit / Head of Controls (L6)

    3-5 years in the Manager role

    You'd move into a 3LOD assurance role, overseeing the independent assessment of controls across the organisation. This requires a shift in mindset from building and owning controls to independently testing and challenging them, reporting directly to the Audit Committee.

    • Developing and executing risk-based audit plans
    • Overseeing internal control testing programmes (e.g., SOX compliance)
    • Providing independent assurance on operational resilience programmes
    • Advising the Audit Committee on control effectiveness and risk posture
Working with AI on the job

Working with AI

Where AI is starting to help

Imagine having more time to focus on strategic risk insights, team development, and influencing senior leaders, rather than getting bogged down in manual data crunching or drafting routine reports. AI isn't just for tech teams; it's a powerful co-pilot for Operational Risk Managers, helping you work smarter and faster.

For an Operational Risk Manager, AI can transform how you oversee your framework, analyse incident data, and communicate critical risk information. It's about automating the tedious, finding patterns you'd miss, and giving you a head start on your most important tasks. Think of it as having a highly efficient, tireless assistant for your risk function.

Automated Control Monitoring

Use AI to automatically scan system logs, transaction data, or user access lists to continuously test controls that are currently tested manually once a quarter. It flags anomalies in real-time, meaning you get early warnings and can shift your team's focus to investigating genuine issues rather than repetitive checks.

Thematic Incident Analysis

Apply Natural Language Processing (NLP) to analyse thousands of unstructured text fields in incident reports, customer complaints, and helpdesk tickets. This helps you identify emerging risk themes and systemic root causes that are invisible to manual review, giving you a deeper understanding of your risk landscape.

Regulatory Change Summariser

Feed new regulatory documents (e.g., from FCA, PRA) into an AI tool that summarises key changes and identifies which internal policies and controls are likely impacted. This creates a first-pass impact assessment, saving you hours of reading and analysis, and ensuring you stay ahead of compliance requirements.

First-Draft Risk Comms & Policy

Use AI to generate the initial draft of risk awareness communications, training materials, or even policy documents. The AI can ensure consistent tone and language, which you and your team then refine with specific context and your expert judgment, dramatically speeding up content creation.

Common questions

Common questions

How do you become an Operational Risk Manager?

Common routes in include Senior Operational Risk Analyst / Specialist (L3/L4) (5-8 years of experience, including 2-3 years at Senior/Lead level), Internal Audit Manager (from a 3LOD function) (Roughly 8-12 years in internal audit, with a focus on operational audits) and Operations Manager (from a highly regulated operational area) (10-15 years in a front-line operations management role, particularly in regulated industries). Times vary with prior experience.

Where can an Operational Risk Manager progress to?

This role can lead on to Director of Operational Risk (3-5 years in the Manager role) and Head of Internal Audit / Head of Controls (3-5 years in the Manager role), depending on the skills you build.

What new skills matter most for an Operational Risk Manager?

Increasingly, AI Ethics & Governance for Risk and Advanced Scenario Planning & Stress Testing. These are the skills our record of this role lists as growing.

Free tools

Want a read on where you stand?

Three free tools, no account needed. Each one ends with a role, a level and a way in.

18Where to go from here

Other roles at Level 5

Same depth of qualification, different job. Useful if the work appeals but this particular role does not.

More jobs in operations

Stay in the field you know and move sideways rather than up.

If you leave this industry

The skills involved in operational risk management transfer to most regulated industries, including financial services, healthcare, energy and telecommunications. They also apply to consulting work, advising organisations on risk management. Identifying, assessing and mitigating operational risks works the same way across sectors.

This role profile is © 2026 Growth Engineering Technologies Ltd. Built from UK occupational standards and regulated qualification data, and written for Zavmo.

You're not behind. You're right on time. The shift is only just beginning. Your role won't look the same in two years. Be the one who leads the change, not the one it happens to. Start my free Automation Fluency module What happens next: a free account, then we build your plan as you set up. No card. Build your plan, see your roadmap and meet the twelve tutors matched to you. All free. When you're ready to start learning, it's £70 a month, billed monthly. Cancel any time and billing stops.