The main provisions, concepts and definitions of ensuring information security of the company's activities, its various structural entities, organizational and legal, technical, methodological, software and hardware support are presented. Particular attention is paid to the problems of methodological support for the activities of both society and specific firms and systems (OS, DBMS, computer networks) operating in organizations and firms.