Operational Risk Management (ORM) uses a standardized framework to identify Major Incident Hazards (MIHs) and map them using bowtie diagrams to determine critical controls and assurance activities. These controls are validated using Critical Control Assurance (CCA) checklists within a common enterprise tool.  Implementing ORM strengthens our systems by standardizing risk terminology, governance, and control validation. Applied to tailings dam integrity, ORM ensures threats are managed through preventive and recovery controls verified by CCA checklists. Our journey so far has reinforced the importance of clear MIH definitions, competency-based ownership, and strong frontline integration of critical controls. We are focused on formalizing enterprise accountabilities, strengthening technical ownership and communities of practice, and embedding control verification into the execution of high-risk work. This continued evolution reflects Suncor’s unwavering commitment to “Safety Above All Else” and its responsibility to protect our people, the environment, and our assets.