This paper presents a dynamic stochastic model to support decision-making in investment on information security. This is caused by the fact that some of the key aspects in a company is information security. One of the issues highlighted in this model is the classification of information. It uses a set of digital signal methods to handle the complexity and uncertainty. Finally, a case study applied to a bank is presented, where the alternatives proposed by the model are being implemented.