Consider degradation rather than service interruption in the event of a failure.
In case of failure of one of the subsystems, a degraded version of the service must be considered in the first place rather than an interruption.
With the help of Circuit Breakers, isolate a breakdown to avoid its impact and propagation to the entire system.