The current legislative and regulatory database of biometric characteristics for the security of information technologies is not informative and has an imperfect system. The main disadvantages include: the lack of system and methodology for building biometric identification/authentication for managing access to protected information resources; insufficient knowledge of all possible biometric characteristics of a person; an imperfect model of the biometric system; a static approach to assessing access control. Therefore, there is a need to develop a biometric identification/authentication system to restrict access to information resources in various areas. Accordingly, we propose to systematize the biometric system for protecting and managing access to information.