Regulatory documents of the DIT Inforмation policy security Regulation on the department of information technology Methodology of information security risk assessment Rules of identification, classification, labeling, certification of assets related to information processing facilities and their inventory; Rules of conducting information security internal audits Rules of using cryptographic information protection tools Rules of organizing the procedure for authentication and delimitation of access rights to information resources Rules of organizing anti-virus control of using mobile devices of the Internet and electronic mail information carriers Rules of organizing physical protection of information processing equipment and secure environment for information resources operation Action plan to ensure continuous operation and to restore operability of assets related to information processing facilities Guidelines to supporting an informatization object, backing up and restoring information Guidelines on the procedure for users to respond to information security incidents and emergency (crisis) situations