Set the severity value according to your organization's security policy.