Abstract: The analysis and evaluation of security risk in tobacco enterprise's network were introduced, the main security threats and weaknesses were discussed.Based on the facts of Longyan cigarette factory, the schemes of network security system were proposed, including fire wall, integrated anti-virus system, anti-intrusion test system, data backup and recovery system, and the building of management system.The products selection in the schemes was introduced.The standardization of the security management system of network and information could improve the management of information and security effectively, and ensure the security of network and information.