Richard, the owner of TaoSecurity posted an interesting article about the classification of security incidents.
The exercise was to translate security incidents into something easily rank-able like numbers and colors) to a security incident (read: oriented to management).
(Link from picassa)
Read the blog article here. Take time to read all the comments! Really interesting stuff there.