Information security management is the core elements to build an information security systems. This paper introduces the basic concepts of information security management，and focuses on the information security management system（ISMS），and information security protection which these two types of management system are typical in domestic and foreign countries，and briefly describes the relevant standards and rulemaking situation of information security management in domestic and other countries.