A proposal to fuzzify categorical variables in operational risk management