Information Security Management

today data behind building and hardware equipment are very important investment of enterprise and organization and play main role in it. Different enterprise and organization have different security requirements and in order to their requirement must be apply different control security. In order to data protection from integrity and security aspects, many authors have many tries. Information security management guide lines have extent scope and most of them are common and don't attention to enterprise or organization difference. Because of these reasons we need to information security management standards. In this paper ISO\IEC 27000 series and ISO\IEC 15408 describes and from scope and application aspect compared with together. The results can be provide better information security management.