This thesis describes risk assessment model for data security and business continuity in a furniture retail chain. Information security risks have been developing proportionally to today's development of information systems. The risk assessment model is gradually formed by describing the significance of the application of information systems, their security and protection. The furniture retail chain was analysed in detail as a business system determined by its organization and structure, business processes and data. The resources are listed and the organization and importance of the information system in the furniture trade chain are described. The organization and structure of data and the organization of the implementation of business processes in which business and personal data are used is very important since data is an irreplaceable resource. After the description of the system, possible threats to specific resources of the information system as well as risks were identified, and risk analysis and assessment were carried out using a modified method for qualitative risk assessment. A risk management strategy identified in the furniture trade chain is implemented to ensure the security of business data and information of end customers, company assets, and to reduce the impact of internal and external factors that may threaten business continuity. In accordance with the risk assessment, protection measures are proposed protection measures reliability assessment is carried out and simulation of reliability calculations is made during the supervision of the established data security system. In the end, we conclude that regular risk assessment using an appropriate risk assessment model and consistent implementation of protection measures in accordance with the risk enables the preservation of data and the continuity of business of the furniture retail chain system.