Shadow IT severity classification Shadow IT classifies the severity of events using these terms: Panel Description Low Events found during historical scan. Medium First event for a user. High Second or more event for the same user.