A High incident causes harm to one or more business units, causes delays to a business unit’s activities, or clearly violates organizational security policy without substantively impacting the business so that it is classified below Critical severity.

High: the incident will cause harm to one or more business units within the organization

— Pyrana Incident Response Policy.pdf

and/ or will cause delays to a business unit's activities

— Pyrana Incident Response Policy.pdf

or the incident is a clear violation of organizational security policy, but will not substantively impact the business

— Pyrana Incident Response Policy.pdf