Risk assessment for security management is a complex process which linked to substantial ambiguous. However, existing techniques of risk analysis determine the solution by the probability distribution function of threats and its impact loss. In fact, it is difficult for users to collect precise and adequate events to estimate the probability of threats and impact losses. Consequently, a fuzzy risk analysis model is developed to prioritize the risk ranking of assets. The proposed model uses Pseudo-Order Preference Model (POPM) to represent the imprecise preference degree of decision maker and determine the ranking of alternative using fuzzy majority concept. It extends the traditional risk analysis using fuzzy multiple-person decision making (MPDM) theory and POPMto risk analysis in fuzzy environment. Finally, a real case of risk assessment for the Internet Data Center (IDC) is given to illustrate our approach.