diff --git a/windows/keep-secure/audit-authorization-policy-change.md b/windows/keep-secure/audit-authorization-policy-change.md
index 0194d0a071..e9b847fe29 100644
--- a/windows/keep-secure/audit-authorization-policy-change.md
+++ b/windows/keep-secure/audit-authorization-policy-change.md
@@ -23,7 +23,7 @@ Authorization policy changes that can be audited include:
 
 -   Changing the Encrypting File System (EFS) policy.
 
-Event volume: Low
+Event volume: Very high
 
 Default: Not configured