A formalized models of information security objects suggested for the task of information security risks assessment. We suggested conceptual model for the subject “Information security risk”. Some fundamental theorems are formulated and proved.