Recently, the breakdown of online banking servers and the leakage of customer information give rise to much concern about the security of information systems in financial and banking companies in Korea. The enforcement of security for information system becomes much more important issue than earlier. However, the security reinforcement of information system is restricted by a budget. In addition, the activities' cost to secure information system from threatening are under uncertain circumstances and should be established by a human decision maker who is basically uncertain and vague. Thus, making the budget for information system is exposed to any extent of the risk for these reasons. First, we introduce brief fuzzy set theory and fuzzy AHP (Analytic Hierarchy Process) methodology. Then, the cost elements that comprise yearly budget are presented and the priorities among the cost elements are calculated by fuzzy AHP. The cost elements that are exposed to risk are evaluated from the both perspectives of the risk impact and risk occurrence possibility which are expressed as linguistic terms. To get information on the risk profiles-pessimistic, most likely, and optimistic-for each cost element, the evaluation is accomplished and the result is presented. At last, the budget ranges-minimum, mode, maximum-for each cost element are estimated with the consideration of the risk profiles.

Most industrial accidents occur when the workers' unsafe behavior and the unsafe situation of workplace take place at the same time. Although human's unsafe behavior is indispensable to work field, the evaluation scheme to detect the causes for the accident resulted from human's unsafe behavior and counterplan should be prepared to prevent and reduce accident. To do this, we first classify the specific background factors in terms of human inner factor and environment factor and then develop the AHP (Analytic Hierarchy Process) model to analyze the background factors that affect the worker's unsafe behavior. We also develop a checklist to be able to evaluate the occurrence possibility of individual worker's unsafe behavior.