Computerization in the modern society not only offers benefits - it is accompanied by multiple risks and vulnerabilities. Ensuring a sufficient level of information protection within an enterprise should be a major concern, imposing the responsibility of using not only traditional techniques, but also some others, which have been proven effective in other areas. The purpose of the research is to find new directions for applying the operations security in the process of ensuring information protection within an enterprise. The research methods used were analysis, generalization and modeling. Using them there were synthesized the content of operations security as an important element of the entire information protection process within an enterprise or organization. There are described steps, presented some of the best practices and proposed some examples of using of the operations security.