The two incidents with low criticality mainly concerned the risk of compromising the integrity and confidentiality of information, while in the case of the incident with the highest criticality there were also risks related to the availability of data.