Risk management means making steps in order to identify those risks with a highly probability of causing problems to a project, to analyze the probability of loss and the magnitude of loss for each risk, to classify the risk points identified according to the composed risks they belong to. An especially important role in any system is owned by the human factor, maybe the most incontrollable component of the surrounding world, a primary source for uncertainty, as John von Neuman and Oskar Morgenstern claim [*]. The main objective of this paper is to analyze the human component and to offer solutions from the risk management perspectives at least from two points of view, that is: human, as an attack source to the information system (e.g. outside attacks, inside attacks – ill intended persons, unprepared persons etc.) and the risk generated by the status of key position of a human resource within the system (e.g. the effects caused by disease, death, leaving the team etc.).