Ключевое слово: «policy»

in the article we consider the information security problem as one of the most challenging one nowadays. It can provoke both financial and reputational risks for a company. The information security management aims at preventing these threats, their minimizing and ensuring an appropriate level of security for the company's IT infrastruc-ture. The main components of the information security policy are analyzed. Dangers which an inadequate information security policy of the company can cause are listed. The tasks of the information security system are worked out. The stages of the information security policy are developed. An optimal information security model of the enterprise is suggested.