Abstract. Analysis of computer incidents in modern information and communication systems is conducted. The main aspects and elements of information security incident management are examined. Based on a detailed analysis of incident monitoring process index performance of incident management are defined. In order to improve efficiency of incident management implementing of intellectual technology is proposed. The algorithm of intellectual system of decision-making process to improve security by optimal incident management is described.