The article discusses how to identify and assess information security risks in a telecommunication company's system. The researchers focused on protecting the hardware and software from threats, rather than just the information itself. They used international standards to evaluate risks and chose a cost-effective method for risk assessment. By analyzing valuable assets and potential threats, they calculated the risks to the company's information system. They also identified risks that are acceptable without needing further action. The researchers suggested measures like backup systems and firewalls to minimize these risks.