Abstract: Information security evaluation is the guarantee to the effective long-term information security protection.Based on the theory of dynamic system control, this paper emphasized on the system approach of Information security evaluation, presented a framework model for information assurance, and proposed a evaluation model for system approachof information security, dedcribed the procedures of system approach of information security, and provided the hardens to the protect system of information security.

Key words: Information security,Information assurance,Indicator system,Systematization