V. I. Korolev

Methodology of information security for informatization objects are offered and founded. The information security system is created, which provides complex, coordinated and associativity solution for information security problems. The main task of information security system is to prevent some or all the threats for information security in the automated systems of information objects. Two aspects of the information object notion are analysed. The notions of information menace and menace of information, how the final result of information object activity is influenced are made more exactly. The relation between menace of information, information risks and risks for enterprise are determined. The designing method of complex information security systems (CISS) for informatization objects are examined with systemic analysis and modern view of information technology. Structural components CISS - functional and support subsystems, technological support and information security control are determined and uncovered. The analyses of groups of information menaces, methods and conditions for picking out functional subsystems CISS, formulation of the functional problems of information security, integration of information security problems into the functional systems are made. Principles of picking out support subsystems CISS are formulated. Standard structure of functional and support subsystems CISS are offered. The synthesis of CISS structure with technological support and information security controls are accomplished. Responsibility zone of CISS for informatization object and features of information security control are determined.