New on FinoLib · Volume III: Finance Encyclopedia
My latest article is now live on FinoLib, the free finance library I write: Impact Tolerances and Important Business Services Explained, from Volume III: Finance Encyclopedia. Read the summary below for the substance of the topic, then continue to FinoLib for the complete treatment.
8.7 Important Business Services and Impact Tolerances
The idea in plain words
An important business service is a service to outside clients whose disruption could cause intolerable harm. Its impact tolerance is the longest disruption that is acceptable, measured in time. Systems coming back is not the end of the problem, because a backlog keeps clients waiting after that. So the recovery time must be much shorter than the tolerance.
Key points
■Name services from the client’s side (“make payments”), never as systems or departments.
■Worked example: with arrivals of 2,000 an hour and capacity of 2,500, total disruption is five times the outage, so a 24-hour tolerance allows only a 4.8-hour outage.
■Surge capacity is the other lever: at 3,000 an hour the survivable outage rises to 8 hours.
A closer look
An important business service is a service to an outside client or market participant whose disruption could cause intolerable harm or threaten the firm’s soundness or market stability, named from the outside in: “make payments for clients”, not “the payments engine”. An impact tolerance is “the maximum tolerable level of disruption to an important business service, as measured by a length of time” (FCA Glossary). Firms must stay within it “in the event of a severe but plausible disruption” (SYSC 15A.2.9R), tested across scenarios “of varying nature, severity and duration” (SYSC 15A.5.4R). Risk appetite limits how likely a failure is; an impact tolerance assumes it has happened and limits how long clients feel it.
Decision rule
For each service, maximum outage = tolerance ÷ (1 + arrival rate ÷ spare clearing capacity). If tested recovery is longer, shorten recovery or add surge capacity; never lengthen the tolerance unless the harm analysis supports it. Where clients cannot submit work during the outage, there is no backlog and the outage itself is measured against the tolerance.
The costliest mistake
Setting the tolerance at what the firm can already achieve. A firm whose tested outage is 6 hours could set a 30-hour tolerance and pass every test while clients waiting beyond 24 hours are harmed. The 30 − 24 = 6-hour gap is a vulnerability to record and fix (SYSC 15A.6.1R).
Recap
Important business services are named from the client’s side and each has an impact tolerance measured in time. Backlogs mean total disruption exceeds the outage, so the maximum outage equals the tolerance divided by one plus arrivals over spare capacity, 4.8 hours against a 24-hour tolerance in the worked example.
8.8 Bringing It Together — Reconciliation as the Operational Proof of Governance
The idea in plain words
Governance is only words until it is proven. The Three Lines say who is accountable. The client asset rules say what must be true. Daily reconciliation shows that it is true. Tools like RCSAs, the risk register, key risk indicators, loss events and, in the US, SOX 404 connect each break to the board.
Key points
■A worked break log shows 91.1% of open value aged past five days, one red KRI and one reclassified “timing” break.
■A recall not yet received is a receivable, not a recovery, so the loss event stands until the money returns.
■SOX 404(a) requires management’s yearly assessment; 404(b) auditor attestation applies to larger listed companies.
A closer look
Part 8: Operational Risk Governance & Reconciliation closes a circle opened in Volume II’s Part 9: the Three Lines of Defense say who is accountable, client asset rules say what must be true (Part 8.1: Reconciliation as a Regulatory Control, Not Just Operational Hygiene), reconciliation is how that truth is proven daily, and operational resilience asks whether it survives a shock (Parts 8.6 and 8.7).
Decision rule
Treat a reconciliation as evidence of control only if it is complete (every account in scope ran), independent (the external record came from the third party), timely (breaks aged with owners) and reviewed by a second person. If any test fails, the control failed even if no break appeared (Part 8.4: STP Rate, Tolerance, and Matching); report it through the RCSA.
The costliest mistake
Three approvers reading the same misleading screen. On August 11, 2020, Citibank, as agent on a Revlon loan, meant to pay about $7.8 million of interest. Under its “six-eye” procedure three people approved the payment, all believing that setting only the principal field to an internal account would suppress the principal; Citibank paid out $894 million of principal, about 894 ÷ 7.8 ≈ 115 times the intended amount.
What the full article covers
In the full article I take you through these sections:
■8.7 Important Business Services and Impact Tolerances
■8.8 Bringing It Together — Reconciliation as the Operational Proof of Governance
It includes worked examples, a look under the hood at the mechanics, a clear decision rule, the one mistake that costs people the most, a recap, a reveal-on-click quiz and the official sources behind every figure.
Volume III: Finance Encyclopedia
Read the full article on FinoLib
The complete article, Impact Tolerances and Important Business Services Explained, with every worked example, diagram, quiz and source, is free to read in Volume III, Finance Encyclopedia on finolib.com.
Explore the Finance Education Series: Vol. II — Capital Markets · Vol. I — Global Economy · Vol. III — Finance Encyclopedia · Vol. IV — Finance Careers · Vol. V — Personal Finance