ABSTRACT. The new types of threats to information introduce new approaches to building protection systems, the protection against threats in real-time. The arising number of security issues in the information environment makes you look for new methods and approaches to the management of information security incidents. The incidents management is a critical process that provides organizations with the ability to, firstly, identify an incident, and then using properly selected support tools as soon as possible to resolve it. Intelligent systems have recently become a common commercial product that finds wide demand from users-specialists in various fields of engineering-technical and scientific spheres of activity.