Abstract: For strengthening the security management of industrial control system in tobacco industry, a security system based on whole life cycle was configured following the basic situation and security risk of industrial control system. The configured system infuses network security into the whole life cycle of industrial control system, its implementation contains six stages:integrated planning, equipment modeling, on-line testing, operation and maintenance, repair, off line and dismantling. With the concept of hierarchy and security domain in design, by setting up firewall between security domains, establishing white list and safety evaluation, the security level of industrial control system is effectively promoted. The said system provides a reference for the intensive integration of informatization and industrialization in the tobacco industry.