The maximum tolerable level of disruption to an important business service, including the maximum tolerable duration of a disruption. A concept that is a part of operational resilience, impact tolerances should be expressed in terms of outcomes and metrics.