Each company has assets of various types. Assets are associated with the concept of risks, so there is a necessity to analyze and research them etc. This paper is devoted to a general risk estimation method, which is unlike analogs uses vulnerability matrix for separate risk estimation.