Abstract: Information security risk management is an important cornerstone of the development of information security in China. Based on the investigation of the current information security risk management standard system, this paper analyzes the problems existing in the standard system, and puts forward the scientific construction method and system framework of the risk management standard system under the new situation, aiming at improving Scientific and practical of information security risk management in China.

Key words: risk management standard system, risk management, risk assessment, information security assurance work, framework, framework construction method

摘要： 信息安全风险管理是我国信息安全保障工作开展的重要基石.通过对当前国内外信息安全风险管理标准体系制定情况的调研，分析新形势下既有标准体系存在的问题，提出了新形势下风险管理标准体系的科学构建方法和体系框架，旨在进一步提高我国信息安全风险管理相关工作的科学性和实用性.

关键词: 风险管理标准体系, 风险管理, 风险评估, 信息安全保障工作, 体系框架, 体系建构方法