Information security risk management system

So the article mainly consists of two parts: the Information System Risk Analysis and security Management and the design of the security model based on the RBAC.

因此，本文主要分为两个重要的组成部分：信息系统的风险分析和管理过程及基于RBAC的安全模型设计。

Assessment tools are the guard for the information security on the risk assessment, and then we can establish the information security management system.

风险评估必须用到评估工具来完成对信息保护的工作，从而建立信息安全的管理体系。

Security assessment is an important process to carry out information system risk management.

安全评估是对信息系统进行风险管理的一个重要步骤。