Abstract: This paper presents a proposed evaluation model based on the three properties of the information security system defined by ISO17799. First, the information security system model with three hierarchies is established by arranging and classifying the subsets of the three properties of the information security system. Second, the NLPCA(Nolinear Principal Components Analysis) method is employed for the calculation of the values of the coefficients in this information security system model. Second,Before simulations the condition of selecting nolinear function is proposed after analyzing the properties of the function.Then,according to the condition,four nolinear functions are selected to adopt for the system simulations. Third, based on the comparison among the results of the four methods the principle of selecting functions is sumed up.The application of the NLPCA method to information security evaluation is an attempt, and the model proposed is proved to be of rationality and validity by the simulations.