Wire Transfer Origination (Fedwire / CHIPS) — impact tolerance ≤ 2 hours — ITOL
Impact tolerance: ≤ 2 hours — during Fedwire operating hours (21:00 ET prior day – 19:00 ET), for > 5% of daily origination volume or ≈ $500M of queued wire value, whichever trips first. The bank must also restore its ability to initiate recall/freeze requests on suspected-fraud wires within the same window, since recovery odds collapse within hours of release (illustrative default — trace the derivation, then replace with your own harm analysis)
Definition: Send US-dollar wholesale wire transfers on behalf of retail, commercial, and correspondent customers via Fedwire Funds Service and, where applicable, CHIPS (the Clearing House Interbank Payments System). Includes the fraud-response workflow for outbound wires: initiating recall/return requests, beneficiary-bank freezes, and FinCEN (Financial Crimes Enforcement Network)/FBI kill-chain referrals. That workflow operates on an hours-long window before fraudulent proceeds disperse.
Why it is designated: Fedwire is a systemically important payment system, and its settlement day ends at a hard 19:00 ET cutoff. An outage that runs past mid-afternoon turns queued customer wires into failed same-day obligations, such as closings and margin calls. It also strains liquidity at counterparty banks. The 2003 Interagency Sound Practices paper sets a 2-hour recovery goal for core clearing and settlement organizations, and expects significant market participants to be able to recover within 4. A Category III super-regional plausibly is a significant market participant, so the 4-hour capability is the archetype's floor. The published ≤ 2 hours is that floor plus a deliberate buffer, sized to the 19:00 cutoff and the same-day liquidity at stake. The recalibration at ≈ $500B kept the 2-hour number but changed the severity qualifier. A percentage-of-volume trigger drifts as the book grows, so the line now also trips at ≈ $500M of queued wire value. A channel outage concentrated in large corporate flow can queue half a billion dollars of wires without ever touching 5% of the wire count.