This paper describes the analysis of improving information protection on the example of a selected company. The paper aimed to study and analyze the business in detail, and to propose changes on those bases that would improve the way of managing business. After implementing the recommended changes, the company would be ready for the introduction of the information security certificate (ISO/IEC 27001 ready). Every day, in modern operations, the company meets countless pieces of information and data. To be able to properly protect and use them, it's important to recognize them by acquiring a good information system. The problem of information protection has been analyzed by using different research methods like modeling method, comparative method, analysis method, empirical method, proof method, etc. Those analyses set a good theoretical framework for a detailed understanding of the concept of information protection and all that belongs to that same concept. Through further analysis and research of companies' business operations, the information gathered tries to collect and investigate all possible responses and options of research goals. The research goals are the ones that provide depth and an overview of information security, information protection, and international information security certificate, topics. The result of the paper is a proposal to improve the enterprises' business operations, which would significantly improve the protection of information and make the company ISO/IEC 27001 ready. This result will be achieved by reviewing the theoretical part, eligibility, and detailed elaboration of all conditions within the work.