The problem of constructing of information security management system, taking into account the scale and structure of the enterprise, is considered. The main models used for solving problems of enterprise's information security management are analyzed. The main shortcomings and problems of their application are determined. The model that takes into account the specifics of enterprise's operation and allows to carry out management of various information security tools for various types of

more »

... ise assets and threats to information security, is proposed. The software package that implements the model is developed. With help of software package experimental studies on typical automated control system of technological processes of the enterprise are carried out. Key words-information security management, automated control system of technological processes of the enterprise, enterprise asset, information security tool, threat to information security, threats' to information security management. This is an open access article under the CC BY-NC license (http://creativecommons.org/licenses/by-nc/4.0/).