The Stanford University classifies the data and systems as High Risk if:
Protection of the data is required by law/regulation,
Stanford is required to self-report to the government and/or provide notice to the individual if the data is inappropriately accessed, or
The loss of confidentiality, integrity, or availability of the data or system could have a significant adverse impact on our mission, safety, finances, or reputation.