A High incident is defined as one that causes harm to one or more business units, causes delays to a business unit’s activities, or clearly violates organizational security policy without substantively impacting the business so that serious but non-catastrophic incidents are distinguished from Critical ones.

High: the incident will cause harm to one or more business units within the organization

— Pyrana Incident Response Policy.pdf

and/ or will cause delays to a business unit's activities

— Pyrana Incident Response Policy.pdf

or the incident is a clear violation of organizational security policy, but will not substantively impact the business

— Pyrana Incident Response Policy.pdf