Internet of Things technologies are currently rapidly developing. They provide partial or complete automation in production, security, and household spheres. However, given the amount of data that the Internet of Things currently operates with, it is necessary to improve methods and approaches to the information security of such systems. The article proposes to pay attention to assessing information risks as an aspect of information security. This paper studies the use of the complex assessment mechanism to assess the security level of the Internet of Things by analyzing information risks. We propose an approach to assess the confidentiality of a system as a component of the integral information risk. The proposed approach consists of seven stages. The assessment is made by comparing vulnerabilities and possible attacks on the system (stages 1–4), as well as using typical mechanisms of complex assessment (stages 5–7). The second section contains a description of the approach itself. The third section of the paper contains examples of possible scales and values of criteria for complex assessment. The importance of this approach is to calculate the local risk for further assessment of the security level of the system.