FIPS 199 defines the three levels of potential impact on organizations: low, moderate, and high.

The loss of confidentiality, integrity, or availability might result in a major damage to organizational assets.

The loss of confidentiality, integrity, or availability might result in severe damages like life threatening injuries or loss of life.

The loss of confidentiality, integrity, or availability might result in major financial losses.

The loss of confidentiality, integrity, or availability might cause severe degradation in or loss of mission capability to an extent.