  In this paper are presented methods of impact analysis on informatics system
security accidents, qualitative and quantitative methods, starting with risk
and informational system security definitions. It is presented the relationship
between the risks of exploiting vulnerabilities of security system, security
level of these informatics systems, probability of exploiting the weak points
subject to financial losses of a company, respectively impact of a security
accident on the company. Herewith are presented some examples concerning losses
caused by excesses within informational systems and depicted from the study
carried out by CSI.
