The paper analyzes the sources of information system risk in the hospital from four aspects such as unsafe behavior of personnel, unsafe condition of equipment and software, uncertain factors in environment and defect in management, and comes up with coping strategies including attaching importance on education and training, increasing technological investment, strengthening daily maintenance and improving management system, etc.