Contemporary realities dictate that technologization, digitalization (transition of the economy and the social sector to digital technologies of functioning and interaction) and the national intellectual capital are the basic competitive advantages of the country that require proper information security. An information security system is a set of corporate rules, standards of work and procedures for ensuring information security formed based on the audit of the company's information system, and the analysis of existing security risks in accordance with requirements of the regulatory documents of the Russian Federation and the provisions of the standards in the field of information security. It is especially important for Russian companies actively interacting with foreign partners. In addressing the problem of information security, the development of the company's unified information security policy occupies a leading place; therefore, this article will be devoted to consideration of these issues. The authors of the present study proceed from the objective-subjective predetermination of any phenomena and processes of the external world. In this format, the study is based on general scientific methods: systematic analysis and generalization of normative and practical materials; formal and dialectical logic: analysis, synthesis, induction, deduction, hypotheses, analogies; and special methods of legal research: comparative-legal and historical-legal, system analysis and interpretation of legal norms. Based on the analysis, the following conclusions have been made: currently, the most important direction of the national economy development is the protection of vital human and social interests, the key element of which is information security. This study represents the development of a scientific overview of the modern ways to ensure information security in both applied and legal contexts. This article underlines and examines the problems and economic legal features of ensuring information security in Russia. These materials can be used both in preparation of other scientific research and in the development of guidance documents by the power structures.

The issues of ensuring the electronic payments’ security are currently in the limelight of participants in the monetary system and the scientific expert community. The goal of this paper is to develop organizational and legal measures aimed at improving the security of electronic payments in the Russian Federation. Research methods include the analysis of retrospective data describing the development of the payment system and electronic payments using bank cards, as well as the method of statistical observations and analysis of secondary data from surveys of Russian and foreign companies covering the information security. Through solving the research problems, the author managed to draw a number of conclusions: Dynamic development of the electronic payment system causes the growth of cybercrime and cyber risks in payment systems; Despite quite active actions of state bodies and the Bank of Russia, the legal framework and infrastructure for electronic payments are still in the development stage; Cyber attacks cause significant damage not only to financial institutions, but also to companies from a non-financial sector, as well as to ordinary citizens using electronic payment systems. In the opinion of the author, the key organizational and legal measures aimed at mitigating cyber risks in electronic payments may be measures to form the centralized payment infrastructure of the Bank of Russia, introduce the corporate cyber threat management systems, improve policies and procedures for the protection of personal data at the corporate level, as well as train the employees in the field of information security of electronic settlements.