Abstract: The article discusses the problem of cost for maintaining secret information and therefore, problematic of cybersecurity costs throughout business organization overall. Attention is drawn to the financial aspect of organization of cybersecurity system around business data and information. In order to effectively conduct business in a competitive environment, you need to properly manage the information and data of the enterprise. Especially if this information is secret and brings great benefits to the enterprise in its activities. In order to effectively use secret information, it is necessary to create a system of protection and a regime of restriction of access to information or its free distribution, in which the effect of using information, taking into account the positive and negative consequences, would reach the maximum value. To compare information from the point of view of the need to restrict access to it, it is proposed to evaluate the information by the degree of manifestation of the entire set of threats in case of their free dissemination and possible costs of restricting access to them and to determine the "weights" of threats, benefits and costs in order to obtain a single measure that characterizes the integral effect of restricting the dissemination of information. The author proposes a model for calculating the value of the integral indicator of the chosen mode of information dissemination, which includes the potentially possible amount of damage during the dissemination of information, the potentially possible amount of benefit during the free dissemination of information, the probability of harm and benefit during the life cycle of information, the cost of protecting information. Thus, the relationship between the costs of information protection and the required level of protection of classified information is highlighted. The author also proposes a classification of costs for ensuring cybersecurity of the enterprise