An urgent task of many organizations is currently the issue of staffing in the field of information security. And this problem mostly lies in the difficulty of determining the correspondence between functional responsibilities and the norms of working hours for each individual specialist. At the moment, there are no regulatory documents that strictly outline the norms of labor costs for specific functional obligations of specialists, which would give an accurate answer on the quantitative composition of the information protection unit. In this paper, one of the solutions to the problem of constructing a quantitative model describing the number of information security units based on typical indicators of the organization's needs in the field of information security is implemented.
Keywords: information protection, regression model, model competition, adequacy criteria, forecasting, staffing of information protection units