The development of risk analysis methodology for information asset on network

Lately, information environment changes rapidly and so does the danger of information assets. More and more organizations recognize these threats and try to find suitable methodologies to protect their information assets. Many organizations in critical information-communication infrastructure also take great interest in threat, vulnerability and risk analysis. And the relationship of information system and network in one organization for occurring the mission is growing and complex. In this paper, we define the relationship of entity to other systems or networks as well as the relationship between the components within the network and propose the risk analysis methodology, asset identification, threat and vulnerability analysis and safeguard suggestion on defined network environment.