During a seminar focusing on different techniques for modeling operational risks, an operational risk manager is asked by a risk analyst how to appropriately apply the power law in estimating operational losses. What would constitute a correct explanation for the manager to provide with respect to the application of the power law in this context?