Information is a strategic resource of modern society, hence the importance that their protection has for the functioning of organizations, as well as for their very survival. Scientific theory today agrees that the issue of security, ie protection of information and their resources goes beyond the area of necessary knowledge that is exclusively technical in nature and without which it is not possible to establish an information system, but that non-technical aspects are crucial for the information protection process. culture, size of the organization, amount of budget for security needs and more. The process of arranging information protection in an organization largely depends on understanding the relationship between the concepts of information security (IS) and IT security / security in the IT field, where in practice there is a harmful practice that IT security is superior. The term information protection (IS). This practice leads to neglect of non-technical aspects of information protection as part of the organization's security system, and especially in the area of developing employees' awareness of safe behavior within the organization, which ultimately gives the organization greater exposure to security challenges, risks and threats.

International coordination of banking policies can be seen through the work of the Basel Committee, where the importance of security and protection of information in banks and other financial institutions highlights the Basel II agreement, as it identifies operational risk as one of the key risks for these entities. Based on the said agreement, the National Bank of Serbia adopted an accompanying norm, which does not exhaust the field of information protection in that sense, but represents a good basis for further elaboration of information protection systems in banks, through development of local security policies and other acts regulating information protection in them.