Abstract
The model that describes the procedure for formalizing the task of optimizing the Information Security System (ISS) of a business entity (company) has been further developed. At the same time, unlike existing approaches, the emphasis in the proposed solution is on mathematical, algorithmic, and computer support for the decision-making procedure in the task of organizational and economic support for the effective protection of corporate information in the context of the company’s Information Security (IS) management tasks. It enables the defense side to effectively determine the parameters of organizational management of the company’s information security infrastructure. The contour of the Decision Support System (DSS) in the process of the company’s information security infrastructure development was considered. In the context of a qualified experts’ shortage in the field of information security of companies, additions to the model were proposed that allow taking into account the impact of human resources of experts in information security issues on the management of the company’s information security infrastructure. Recommendations were offered and the corresponding application software—DSS was described. The use of such DSS will help one to minimize the risks associated with the lack of qualified IS experts in many companies.