A Mechanism on Risk Analysis of Information Security with Dynamic Assessment

Information security audit has become more and more important to organizations. Human is usually the most vulnerable part about information security in an organization. In this paper, we propose a dynamic risk assessment mechanism to help the information security manager realizing the human security awareness and vulnerability assessment in end client devices. The proposed mechanism will generate graphic reports to help security manager to improve the information security of organizations. A practical implementation demonstrates that the proposed mechanism is both useful and effective.