The work proposes and substantiates an approach to building systems for identifying information threats. Basic definitions are given and a study of special actions inherent in information operations on the Internet is conducted. It is shown that the production of almost all components of an information operation has already been put on an industrial basis: from viruses aimed at automated military and industrial facilities, to message generators in the form of texts, voice messages based on a given voice characteristic, or videos based on a given initial “picture”. The work describes a mechanism that makes it possible to partially automate the planning of information operations through the use of standard schemes for conducting them, and shows how it is possible to organize game-based training to simulate the conduct of information operations.