• They involve potential loss of one or more of the following:
o A valuable asset, such as data loss or financial loss.
o System access or integrity.
o Privacy or control over confidential information.
o User's time (a significant amount, such as 30 seconds or more).
• They have unexpected or unintended consequences.
• They require correct handling now because mistakes can't be easily fixed, and may even be irreversible.
If a confirmation involves risk, it can be considered a warning as well. Consequently, the warning message guidelines also apply.