We are going to introduce some advanced concepts of risk modelling. We are not going to derive our enterprise architecture risk management models from them in this paper but hopefully it would provide some useful information for people who are interested. We would introduce some example how people are using it in information system in later chapters