Impact Tolerances
The maximum tolerable level of disruption per service — set at the first point at which harm becomes intolerable. Each tolerance is independently governed and consumed by the simulation engine as a breach threshold; the amber Early Warning Indicator line sits at the configured % of each ceiling.
17 of 17
| Service | Tolerance | Metric | Ceiling | EWI (amber) | Governance |
|---|---|---|---|---|---|
| ACH Origination & Receipt | ACH window recovery ACH processing must be restored within 8 hours — in time for the next operator window. | time | 8h | 75% | Approved — authoritative |
| ACH Origination & Receipt | Delayed ACH entries No more than 50,000 ACH entries may miss their scheduled settlement window. | transaction volume | 50,000 entries | 80% | Approved — authoritative |
| Branch & ATM Cash Access | Cash access network restoration At least 80% of the branch/ATM network must provide cash access within 24 hours of disruption. | time | 1d | 75% | Approved — authoritative |
| Branch & ATM Cash Access | Failed cash withdrawals No more than 25,000 cash withdrawal attempts may fail during any disruption. | transaction volume | 25,000 withdrawals | 78% | Approved — authoritative |
| Commercial Cash Management Portal | Delayed corporate payment value No more than $500M of client payment value may be delayed past cutoff. | value | $500.0M | 75% | Approved — authoritative |
| Commercial Cash Management Portal | Portal restoration The commercial cash management portal must be restored within 4 hours of disruption. | time | 4h | 75% | Approved — authoritative |
| Debit Card Authorization | Authorization restoration Debit card authorization must be restored within 30 minutes of disruption. | time | 30m | 66% | Approved — authoritative |
| Debit Card Authorization | Declined genuine transactions No more than 75,000 genuine transactions may be declined during any disruption. | transaction volume | 75,000 transactions | 80% | Approved — authoritative |
| Domestic Wire Payments | Delayed wire value No more than $250M of wire value may be delayed past the value date. | value | $250.0M | 75% | Approved — authoritative |
| Domestic Wire Payments | Failed outbound wires In any disruption, no more than 500 outbound wires may fail settlement on the value date. | transaction volume | 500 wires | 80% | Approved — authoritative |
| Domestic Wire Payments | Wire service restoration Domestic wire payments must be restored within 4 hours of disruption. | time | 4h | 75% | Approved — authoritative |
| End-of-Day Core Processing | Batch completion deadline A failed end-of-day batch must be recovered and completed within 6 hours — before 06:00 next-day channel opening. | time | 6h | 66% | Approved — authoritative |
| End-of-Day Core Processing | Missed batch cycles No more than one nightly batch cycle may be missed in any disruption. | custom | 1 batch cycles | 100% | Approved — authoritative |
| Mortgage Servicing Payments Processing | Misapplied or delayed payments No more than 5,000 borrower payments may be misapplied or delayed beyond the grace window. | transaction volume | 5,000 payments | 80% | Approved — authoritative |
| Mortgage Servicing Payments Processing | Payment application recovery Mortgage payment application must be restored within 48 hours of disruption. | time | 2d | 75% | Approved — authoritative |
Page 1 of 2