Study on Method for Information Security Risk Evaluation

Information security risk assessment is the foundation and the precondition of information security of organization, and is important content of information security assurance. This paper outlines the concept of information security and risk assessment. Then, the elements and methods of information security assessment are analyzed. Risk Assessment Code Matrix of assets_threats_based method is introduced in the text.