Great forum - it will be good to monitor and participate!
No one has such a comprehensive list yet, and no one has those few metrics that we all can use to supplement our combination of facts, intuition and judgment. One project that looks promising is the Key Risk Indicators project (http://www.kriex.org/Default.aspx?BrowserCheckPassed=1 ) underway, managed jointly by the Risk Management Association and RiskBusiness International. Its latest newsletter (June 2007) says that its Compliance Working Group is just starting up. At $18,500 for the first year, the existing operational risk library subscription is rather expensive, but the project itself seems promising.
This article describes some of the dilemmas: http://www.kriex.org/InterestingReading/The%20trouble%20with%20KRIs.pdf