Information asset risk assessment method and device

The embodiment of the invention provides an information asset risk assessment method and device, which can be used in the financial field, and the method comprises the steps: determining an information asset value of an enterprise according to information asset feature data of the enterprise and an information asset value calculation model; determining an asset risk value of the enterprise according to the information asset value, the corresponding risk influence degree, the risk occurrence possibility and a risk value calculation model; according to the information asset value, the asset risk value and the information asset category, determining an information asset risk level and a corresponding disposal measure; according to the invention, the accuracy of information asset risk assessment can be effectively improved. 本申请实施例提供一种信息资产风险评估方法及装置，可用于金融领域，方法包括：根据企业的信息资产特征数据和信息资产值计算模型，确定所述企业的信息资产值；根据所述信息资产值、对应的风险影响程度、风险发生可能性以及风险值计算模型，确定所述企业的资产风险值；根据所述信息资产值、所述资产风险值以及信息资产类别，确定信息资产风险等级和对应的处置措施；本申请能够有效提升信息资产风险评估的准确率。