Along with the wide application of information technique in the electric power industry， information has already become a kind of important property for the modern power supply enterprises and the security problem of network and information has been given more and more attention. Resolving the security problem depends on both the developed technique and the strengthened management. For roundly planning the network and information security and establishing the information security management system（ISMS）， Jiaxing Electric Power Bureau introduces ISO/IEC 17799 and ISO/IEC 27001， two international standards about information security. The information security is guaranteed by using ISMS and the result is remarkable.