How is severity of detection determined on Elements Collaboration Protection?

Issue:

Resolution:

Severity level indicates whether an administrator action is needed to mitigate the immediate risk.

Low: No action is needed because the item is coming from a trusted source.
Medium: No action is needed. The item was automatically either quarantined or deleted.
High: Action required. No automatic action is specified in the policy.
Critical: Immediate action is required to mitigate the risk.