The article examines the socio-psychological features of implementing information security management systems (ISMS) in enterprises. The authors argue that the effectiveness of such systems is determined not only by technical equipment and the regulatory framework, but primarily by the human factor, including the level of organizational culture, trust, and psychological climate within the team. The paper summarizes the results of modern scientific research, international standards from the ISO/IEC 27xxx series, and practical cases from enterprises implementing information security policies. A systemic and interdisciplinary approach is applied, combining methods of cybersecurity, management, and organizational psychology. A classification of six groups of restrictions that arise within the framework of information security policies and directly affect personnel is proposed. Based on the analysis of empirical examples, it is proven that excessive control and regulation lead to an increase in stress levels, professional burnout, sabotage, and the erosion of trust between employees. It is emphasized that strict, formalized policies, without taking into account the socio-psychological aspects, can undermine the effectiveness of even the most modern technical means of protection. The authors note that the successful functioning of the ISMS is possible only if technical, organizational, and behavioral measures are combined, a culture of trust is established, transparency is maintained, and a conscious responsibility is assumed by each employee. The article emphasizes the need for an adaptive approach to implementing information security, which involves regulating policies, training personnel, developing employee psychological resilience, and integrating organizational ethics principles into daily management practices. The results obtained expand the understanding of socio-psychological factors in the field of cybersecurity and can be used to improve corporate strategies for information security management and the development of a security culture in organizations.