The Study On Information System Risk Assessment Bank Of China Guizhou Branch

In the past few years, domestic banks have continuously improved their commercial ways of service, as a result, great progress has been made in the construction of modern information. Advanced information technology has made outstanding role in our bank's development and provided many chances. But every coin has two sides, it also brings big risk. The commercial banks are increasingly concerned how to ensure the availability, stability and security of information systems. In such a trend, the information system auditing and risk assessment on the prospects for risk management of information system are an important part of information project government of the commercial bank.This article firstly discussed the development direction and the application condition of information system risk assessment in domestic and foreign countries, analyzed the causes and forms of the risk of information systems. The major researches are mainly about the relationships among 3 risk assessments (Asset, Threat, Vulnerability), pointing out the mode of calculation of risk assessment and practicing process of risk assessment. Then this article took BOC Guizhou Branch's production system and the example of system monitoring risk assessment as the basis, suggested the mode of risk assessment methodologies and the assessment process, giving a practical mode of information risk assessment. Finally combining the management analysis of the current situation about information system risk assessment in BOC GuiZhou Brunch, this article suggested strengthening the training of compound professionals and making scientific safety manage strategies as well as how to make information risk assessment system perfect in BOC Guizhou Branch.