The technique of investment in enterprise’s information security

The paper analyzes the approaches to investment in enterprise’s information security (IS). The authors propose the investment technique that describes the possibilities of applying the theory of investment management in the sphere of IS to the processes of providing IS to enterprises. Investment in information security projects is the key factor of building an efficient information security system of the enterprise. The efficiency of investment depends on the choice of a technique that would ensure the high level of information security. In an enterprise, information security tasks are reduced to corporate security, so a security specialist must be a business analyst. In practice, the investment policy in the sphere of information security is either a part of the overall investment policy of the enterprise projects or a private policy of the quality management system. The proposed technique reflects the processes of information security and investment procedures. Characteristics of information security investments can be obtained through the use of any model, for example, improving the efficiency of investments in information security of the enterprise.