Impact tolerance refers to the risk of loss from inadequate or failed processes, people or systems or from external events.

The key drawback of impact tolerances is their irrelevance to outsourced (third-party) service providers who cannot be directly controlled.