Cybersecurity risk assessment is a process of evaluating the threats faced by networks and information systems, existing vulnerabilities, possible impacts, and possible risks caused by the combined use of the three based on relevant policies, regulations, and technical standards. It can help organizations identify the risk status of their own networks and information systems, and provide a basis for subsequent targeted protective measures, thereby ensuring the safe and stable operation of networks and information systems.