Commercial Card Program (P-Card, T&E, Purchasing) — impact tolerance ≤ 4 hours — ITOL

Impact tolerance: ≤ 4 hours — during business hours, any material auth-decline event affecting a corporate program (illustrative default — trace the derivation, then replace with your own harm analysis)

Definition: Issue and service commercial credit / purchasing / T&E (travel and entertainment) cards to corporate clients, including authorization, statement, and expense-management integrations.

Why it is designated: Corporate card outages create highly visible client-side incidents (travel stranding, vendor payment failures). Program administrators expect real-time controls and reporting. Losing the platform undermines a top commercial-deposit retention lever.