Abstract:The purpose of the article is a comprehensive analysis of the American concept of threats to information security and determination of priority areas of the US’s activity in creating a secure national cyberspace. The methodological basis of the study is general scientific and special methods of cognition, in particular, systemic approach, analysis, synthesis, and logical method. Methods of content analysis, comparative and analytical monitoring of Internet resources of US government bodies responsible for information security are also used. The scientific novelty of the study consists in the expansion of ideas about theoretical aspects in the field of information security and the systematic analysis of instrumental, conceptual foundations and practical aspects of information security in the United States. Conclusions. The globalisation of information systems has created a completely new situation in the security field. In cyberspace the main threat to the US national security comes from states and intermediaries acting in their interests. They have the necessary skills and technologies to carry out destructive cyberattacks for military and political purposes, and also effectively use cyberespionage methods, which not only entails economic losses, but also causes great damage to strategically important industries for the US. The American concept covers such three key levels of cyber security as the state, private business and individual users. There are such defence priorities for the United States as ensuring the protection of critical infrastructure, information networks and systems; quality control of used IT equipment; formation of effective mechanisms of interlevel communication and raising awareness at all levels. An important component of the US National Cyber Strategy is international cooperation on information security issues. In this regard, at the international level the United States seeks to implement such opportunities as to encourage countries to increase responsibility for ensuring the security of information systems and networks at the national and global level; to create the legal regime necessary to ensure cross-border access to information; to form a regime of collective cyber defence within the framework of NATO and other bilateral and multilateral agreements with strategic partners; to preserve the maximum possible freedom of action in cyberspace in order to conduct all types of information operations both during military conflicts and in peacetime. Keywords: cyberspace, information threat, information war, information security, information management, informatisation, ICT.

Risk Management and the Cybersecurity of the U.S. Government

The Road to Compliance: Executive Federal Agencies and the NIST Risk Management Framework

Risk management framework for information systems and organizations:: a system life cycle approach for security and privacy

Multicriteria Decision Framework for Cybersecurity Risk Assessment and Management

Managing Cyber Risk, a Science in the Making

Cybersecurity Cost of Quality: Managing the Costs of Cybersecurity Risk Management

Cyber Risk Assessment for Capital Management

Assessing The Effectiveness Of Current Cybersecurity Regulations And Policies In The US

Network Security Governance Policy and Risk Management: Research on Challenges and Coping Strategies

Identifying the security risks associated with governmental use of cloud computing

Cyber Security; Etiology and Importance

Decision-Making Frameworks for Network Resilience -- Managing and Mitigating Systemic (Cyber) Risk

Cybersecurity management in cloud computing: semantic literature review and conceptual framework proposal

Information Security Risk Management Framework for the Cloud Computing Environments

You cannot spell risk without "I-S": The disclosure of information systems risks by Fortune 1000 firms

Least Effort Strategies for Cybersecurity

What Do I Need to Know About Cyber Frameworks, Standards, and Laws?

Information Security Management: American Experience

Cybersecurity Law: Legal Jurisdiction and Authority

Asset criticality and risk prediction for an effective cybersecurity risk management of cyber-physical system

Risk and Risk Management in the Public Sector : A Theoretical Contribution