Risk always involves the unknown. The failure price is sometimes translated through loosing certain advantages, neglecting deadlines or reaching unpleasant situations. Experience tells us that we can not protect ourselves against all existing risks. On the other hand, logistics shows that we have to know our own risks, to measure and apply the adequate rules. IT security offers some instruments which imply analysis and measurement of risk factors: security standards and training, analysis and pointing out vulnerabilities, penetration analysis, evaluating the risks one can define the initial security Baseline. IT brokers have the possibility of doing fast attacks without limits. IT attacks involving the informatics systems may have negative results: financial, operational, and legal or strategically on individual or even national level. The paper summarizes the main attack risks for a firm’s IT system.