该文采用系统动力学的研究方法,对信息安全项目中的干系人管理策略进行研究,该方法将整个组织视为完整的系统,深入分析系统内部不同干系人主体的行为模式和动机,发现和揭示信息安全项目中控制措施难落实、安全风险难管控的内在原因,以便在恰当的地方施加有效的干预措施,从而获得预期的风险控制效果,增加安全风险管理工作的效率和收益. In this paper, we use the method of system dynamics to study the strategy of stakeholders management in information security project. The method regards the whole organization as a complete system, deeply analyzes the behavior patterns and motives of different stakeholders in the system, Revealing the inherent causes of difficult implementation of control measures and difficult control of security risks in information security projects so that effective interventions can be put in place to obtain the expected risk control effects and increase the efficiency and benefits of security risk management.