This paper educes the analysis and calculation principles forinformation security risk by introducing a clear concept model,so to provide theoretical guidance to information securityrisk assessment.

• 本文以清晰的信息安全风险的概念模型,导出信息安全风险的分析原理和计算原理,为信息安全风险评估提供理论指导。