The main concepts and approaches to information security management are presented, the main criteria for choosing information security management tools at the enterprise, measures for the ISM of the enterprise are considered, as well as practical aspects of ISMS creation are highlighted. For students and undergraduates of training areas 10.05.03 "Information security of automated systems" and 10.04.01 "Information security."