The article explores and classifies the sources of threats in the process of using information resources suggests ways to preserve the value of information resources and assesses the economic effectiveness of costs for information security. The growing influence of threats to the information security of the modern information system is considered and methods for its effective protection are proposed. And also generalized the main stages of building the information security policy; The subsystems of effective information protection are allocated recommendations on designing the information security policy are developed.