Study on business process-based risk analysis of information system.

A method of business process-based information system risk analysis technique is brought forward in this paper. Focusing on enterprise's business process, it analyzes the handling process of business information and the attributes of business activities and then sets the importance of the correlative assets contributing to the activities. The equivalent value of assets is calculated through analyzing the contribution of assets to the information handling activities. This method can solve the subjectivity and independency of the asset-based risk analysis. As the fundamental aspect of information risk management, the status quo of information system can be acquired through this business process-based risk analysis technique. [ABSTRACT FROM PUBLISHER]