Risk analysis service (IRAS) is a service that is capable of identifying risk, assessing the risk and then invoking a process to identify the proper actions that should be taken to reduce damage that could have an effect on users or organizations subscribed to an NGN. Invocation of a risk analysis service will result in identification of a set of positive actions that could be taken to reduce the current risk level for users or organizations subscribed to an NGN. A risk analysis service will be capable of performing the following functions: identification and capture of the risk information, which will be used as the input to the IRAS; analysis of the risk sources based on detected information; assessment of risks so as to calculate the risk grade; determine actions necessary to mitigating risk.