提　　要 在資訊科技爆炸時代，資訊安全管理系統風險評估已成為各企業營運或軍事部門 優先考量因素；資訊安全漏洞將造成企業或國家之危機，風險發生原因及其影響也將 帶來革命性的變化，為求組織永續發展及營運安全，不斷風險評估、預防管理及立即 應變計畫乃必然之防範作為。本研究應用失效模式與效應分析以評估資訊安全管理系 統風險為例，建立與提供一套資產風險評估與預應之啟發模式，作為國軍有效評估「 國防資訊安全管理系統」之風險參考。

Abstract In this exploded information technology era, the risk assessment of Information Security Management System (ISMS) has become the major concern by the business management and military department. The vulnerabilities of information security would inflict severe crisis on the enterprise or government easily that, however, the risk with its impact also brings us the revolutionary change for the sake of minimizing the risk. In order to keep the sustainable development and secured operation in organization, the continuous risk assessment, preventive management and immediate contingency plan have to be undertaken as preventive action. This paper is to use Failure Mode and Effect Analysis (FMEA) methodology to establish and provide a new risk assessment, and with heuristic model for studying“The effective risk assessment on ISMS of MND＂.