Now-a-days, the security risk management plays a crucial role, which is applied to the entire life cycle of information systems and communication technologies but still so many models for security risk management are non-practical, therefore, it should be measured and improved. In this paper, a novel approach, in which Analytic Hierarchy Process (AHP) and Quantum Particles Swarm Optimization (QPSO) can be combined with some changes, is presented. The method consists of; firstly, the analytic hierarchy structure of the risk management is constructed and the method of QPSO comprehensive judgment is improved according to the actual condition of the information security.