The loss of confidentiality, integrity, or availability could be expected to have a serious adverse effect on organizational operations, organizational assests, or individuals. Thus the potential…

Low impact typically refers to a limited adverse effect on organizational operations, assets, or individuals.

In risk management frameworks like NIST, a 'serious adverse effect' is typically categorized as a moderate impact. This level indicates that the loss of confidentiality, integrity, or availability would result in significant degradation of organizational capabilities or assets.

High impact refers to a severe or catastrophic adverse effect, which is more critical than 'serious'.

Severe is usually synonymous with or falls under 'High' impact in these frameworks, but 'serious adverse effect' maps specifically to Moderate.