Skip to main content

What is Severity in samdesk?

Understand High, Medium, Low Severity filtering

Tamara Byers avatar
Written by Tamara Byers
Updated today

Severity helps your team prioritize alerts faster by highlighting incidents with real-world consequences. When enabled, it reduces noise while keeping high-impact events visible.


How is Severity determined?

Severity is based on various signals:

  • Confirmed human impact

  • Injuries, fatalities, or escalation over time

  • Public exposure or operational disruption potential

  • Incidents affecting high-traffic or critical locations, infrastructure, or essential services

Why does location matter?

An incident may be rated higher if it occurs in a “significant place” where disruption affects many people, such as airports, transit hubs, stadiums, hospitals, universities, or major public venues. Even smaller events can have outsized impact in these environments.


What do the levels mean?

I - Low

Minor disruption or limited impact (useful for background awareness)

II - Medium

Limited casualties or disruption affecting the public or operations (prioritized monitoring)

III - High

Numerous casualties or major disruption, or smaller incidents in major public locations (immediate escalation)


Why do similar incidents sometimes have different severity?

Severity is based on consequence, not just the event type. Two similar incidents can be scored differently depending on confirmed harm, disruption potential, and location.

Did this answer your question?