The article analyzes the main measures of information protection, their importance in building a system of information protection of a state institution, as well as possible vulnerabilities of these measures. Based on the analysis and practical experience, moral and ethical norms are identified as the most vulnerable and least studied from a pedagogical point of view. Taking into account the specifics of the activity of a civil servant, proposals are formulated to form a sense of responsibility for the safety of information of limited distribution in a civil servant, based, among other things, on the personal example of the head of a structural subdivision of a state institution.