Risk of protecting the resources of a typical enterprise information system