A DSS for information security analysis: computer support in a company's risk management

Information security is becoming an increasingly important function in companies. In this paper I will show how I have created a DSS for analysing information security. I will ask myself what risk actually is, what information security risks a company has to take into account and how that can be done. By managing all the risks (risk management) we can safeguard the company's activities. I will treat the key principles of risk management.