High - Physical or monetary loss or system wide disruption can result, such as fraud, system failure, or asset loss.
Medium – Data integrity or manipulation or multiple system disruption can occur, such as master data overwritten, bypassing business approvals, or disruption of multiple business process areas.