System and method for evaluating risk of information assets

摘要

risk evaluation system and method of information assets are provided. The risk assessment system is to quantify the asset classes entered for each asset by asset scale and asset value calculation unit for calculating asset values, and a weak grade entered for each of the established vulnerability entry for the assets vulnerable scale vulnerability calculation unit for digitizing by calculating a weak value, the assets for each set vulnerability items wihyeopseong calculating section and an input select signal to quantify using a threat rating threatened scale input for each calculating a threat value response to be provided with a risk calculation for selecting the application rates for each of a set vulnerability entry for the asset, and calculates a value that reflects the application rate and the risk value to the threat values and calculating the property value in the susceptible value there. ;