With the development of business, the information assets of enterprises are increasing, the exchange of data with partners, customers, and government bodies through the Internet is increasing. The number and variety of types of devices for accessing infrastructure are increasing. The consequence of these changes was a significant increase in the volume and degree of secrecy of information. With the increase in information flows, every day there are more and more threats and risk factors to which the assets of an enterprise are exposed.