When reporting incidents, the process of incident classifica…

When reporting incidents, the process of incident classification is known as triage. When triage is set in motion, the severity of the threat is assessed. Which of the following severity levels applies when limited disruptions to business as usual (BAU) operations are detected, automated controls failed to prevent the event, and no unauthorized activity is detected?