From the non-optimum analysis, it can be concluded that people need the controllable order of the system, and non-optimum can also be non-risk. From the risk reference system, the transit of the system from risk into non-risk as well as the requisites of the transit can be estimated. The Self-organization of Network Security System based on non-optimum analysis will be widely used in the decision sciences. It can often transform people’s experiences into scientific means and might set up reference models with behavior attributes in the control system. This kind of model can marry the experiences and the theories, and can make actual judges to the running path of the risk management.