From the aspects of asset classification, daily operation and maintenance, management mechanism and system configuration, this paper investigates the current situation of information security management and security of organizations.