Analysis of threat of organizational information security and risk evaluation
The article considers the analysis of risks, including identification of levels of risks based on evaluations of resources, threats and weak points. The control of risks consists of identification and choice of counter-measures which allow decreasing of risks to acceptable level.