The privacy issue is one of the biggest challenges in the global enterprises' risks. We applied the Enterprise Architecture Center of Excellent methodology to model Information Security Risk Management of Personal Information Protection by project preparation, systems inventory, enterprise modeling, enterprise model analysis, review & verification, analysis transition. This research reached the goals of the information security risk management: appropriate allocation of enterprise's resources, high performance of enterprise's information security, and reduce risks of enterprise's information security.