Exam rooms

Question

2 of 10
How does the firm set impact tolerances for each Important Business Service, and how were these approved?

Draft response

AI drafted · edited by Marcus Allen

Northwind Payments has identified seven Important Business Services through its 2025 Operational Resilience review, in line with the methodology described in our Operational Resilience Framework §3.2 [1]. The methodology assesses harm to consumers, market integrity, and the firm’s safety and soundness.

Impact tolerances are set per service using a four-dimension framework — customer harm, financial loss, market integrity, and regulatory implication — and expressed as a maximum tolerable disruption duration. The methodology and current tolerances are documented in the Impact Tolerance Register v3 [2].

Tolerances were reviewed and approved by the Operational Risk Committee [3] on 14 November 2025 and ratified by the Board on 28 November 2025. Annual review is scheduled for November 2026, or earlier following any material incident or change to a service.

Unsupported assertion detected. “Annual review is scheduled for November 2026.” We could not find this in approved material — add a citation, edit, or remove it.

Citations

3 sources
1
Policy04 Feb 2026
Operational Resilience Framework v3.1
§3.2 — Identifying Important Business Services
2
Register14 Nov 2025
Impact Tolerance Register v3
7 services, 4 dimensions, MTD per service
3
Evidence14 Nov 2025
ORC minutes — 14 November 2025
Approval of 2025 impact tolerances

Supporting evidence

6
Important Business Services list 2025XLSXValid
Impact Tolerance Register v3PDFValid
ORC minutes — 14 Nov 2025PDFValid
Board minutes — 28 Nov 2025PDFValid
IBS service map (Visio)PDFStale
Q4 2025 IBS scenario test summaryPDFValid

Approval workflow

Marcus Allen
Author · 04 May 2026
2
Priya Shah
Compliance review · pending
3
Aisha Mensah
Senior approver ·