FedRAMP security levels are also known as impact levels and are categorized as: Low impact, Medium impact, High impact. The categorization is based on the severity of the impact that compromised confidentiality, integrity and availability would have on the organization's operations, assets and people. Systems with more adverse effects are classified as high-impact systems, while those with less effect fall under low-impact security level.