In the Republic of Moldova there is no unique and consistent approach to information security area. Good practices in this area are being applied very infrequently and mostly in the private sector. The Government, through the Center for Electronic Government is trying to change this situation in the public sector, where it’s necessary to start with raising a wariness of these practices and their progressive implementation. Security risk and vulnerability y assessment of Information Systems within NOSI will allow to order the security activities according to the vulnerability and risk levels. The obtained result scan serve as a basis for determining efficient ways of information protection within NOSI, as well as for establishment and respecting of some objectives for functionality improvement of the Information Systemused by NOSI specialists.