Option A:A company can have differing operational loss data collection and reporting thresholds for different departments.

Verified and correct. Different departments might have various risk exposures and thresholds based on their specific operational risk profiles.

Option B:The operational loss data collection program has to capture all losses regardless of their size.

Incorrect. A minimal loss threshold is usually set to avoid the administrative burden of capturing immaterial losses. Companies typically set thresholds based on risk appetite and regulatory requirements.

Option C:Setting an operational loss data collection threshold depends on the risk appetite of the firm and regulatory requirements it needs to meet.

Verified and correct. Thresholds are set based on the company's risk appetite and regulatory expectations to ensure effective and efficient loss data collection.

Option D:The operational loss data collection program must include all material losses that are above the minimal gross loss threshold.

Verified and correct. Only losses above the set threshold are required to be captured to maintain a focus on material risks.