Archival information security risk assessment is a complex, standardized, and procedural process which should be carried out strictly in accordance with relevant procedures. This paper researches the processes of information security risk assessment in our country, and proposes macro-process and micro-process of archival information security risk assessment combined with the characteristics of archival information security.