A Survey on the Evolution of Risk Evaluation for Information Systems Security

In order to study the risk evaluation of the information systems security effectively and the laws of the developments of risk evaluation, we have made a detailed analysis from the purpose, the objective, the process methodology of risk evaluation according to the role, the structure and the environment of information system. The tendency of risk evaluation is asserted with the current informatization background and an idea of business process-oriented risk evaluation methodology of information systems security is presented. (C) 2011 Published by Elsevier Ltd. Selection and/or peer-review under responsibility of Hainan University.