The purpose of this article is to describe research conducted in the framework of doctoral studies. Research is focused on importance of information processing and their positive and negative impacts on business and institution management especially about company information systems (IS) and company security policy. Research is conceived as qualitative. Data is collected directly from companies via online questioner (https://www.zefis.cz). Currently are already collected data from more than 3000 companies and the data collection is still ongoing. The result of data processing is found relation among level of company IS, business sector, cyber security of IS, historical-political evolution of environment etc. Main goal of the research is understand companies’ behavior in relation to IS security and discover an algorithm for evaluation of efficiency, security, and risk assessment of company IS as a basis for decision making process of security policy in business management which increase company IS resistance against cybernetic threat.