Many organizations operating in the modern world are dispersed. Distributed structures can function efficiently thanks to information technologies. The article highlights the problem of the security of dispersed structures, with particular emphasis on information security in crisis situations. First of all, the problem of ensuring and maintaining the expected level of information security is identified, mainly in terms of business continuity, with particular emphasis on maximizing the usefulness and value of individual units linked by appropriate relationships in crisis conditions. This means the need to dynamically adapt structures to tasks performed in an environment of strong time and resource constraints. An important role can be attributed to the concept of X-engineering, which can be a specific security management strategy for a spatially and information-dispersed organization, taking into account ICT2. This concept is based on the triad: process, proposal, participation. Therefore, the processes acquire the status of organizational objects and it is then possible to dynamically select their executors. Therefore, the decentralization of decision-making functions may take place in accordance with the competences of entities implementing joint processes in territorial dispersion. The flexibility of changing executive structures depending on the tasks and availability of resources can be ensured by the so-called H-H structures that take into account dispersion states, i.e. decentralization of decision-making functions in the absence of threats and centralization of decision-making functions in a crisis (threats) situation. IT tools of various classes ensure the effective implementation of work and decision-making processes.