The book discussed in detail the possibility of setting information risk analysis and management tasks of the organization of information security in domestic companies. We consider the concept of international information security, as well as different approaches and recommendations to address the problems of risk analysis and management. A review of the basic standards for the protection of information and Risk Management: ISO 17799, ISO 15408, BSI, NIST, MITRE.V This publication discusses tools for risk analysis (COBRA CRAMM, MethodWare, Risk Watch, Vanguard). Recommendations on the use of these tools in practice for analyzing information systems risks. The interrelation of the tasks of security analysis and intrusion detection with the task of risk management. A technology assessment of the effectiveness of information security in the Russian kompaniyah.Kniga be useful to managers Automation Services (CIO) and information security services (the CISO), internal and external auditors (of CISA), the top echelon of the company's managers involved in the assessment of information risks and their management, as well as undergraduate and graduate students the relevant technical fields.