The article describes the basic concepts of risk management in the information security system of the country. It argues the main directions proposed and risk management system of information security.