Abstract: In order to improve the accuracy of the risk assessment of the information system, a new method for risk assessment of information system based on analytic analysis process and neural network e is proposed. The experimental results show that the proposed model can avoid the defect of determining weights of evaluation indexes artificially, accurately describe the information system risk characteristics, enhance the accuracy of the information system risk assessment, and can provide valuable reference information for the information systems security management personnel.