Security threats are divided into three levels - low-level, medium-level, and high-level. The higher the level of threat, the more likely it is to cause serious damage and the harder it will be for a business to recover. Low-level threats can include phishing emails, medium-level attacks can include ransomware, and high-level attacks can include supply chain disruptions.