ISO27000 information security consultancy and certification of information security management system construction project is divided into five major stages, and contains 25 key events before and after each activity if the association can be well done, and ultimately be able to establish an effective ISMS, achieve the overall blueprint for information security, audit and accept ISO27001 certification is a natural thing. 1 of an investigation: from the daily operation and maintenance, management mechanism, system configuration and other aspects of the security status information security management organization to conduct research, organize relevant personnel through training so that a comprehensive understanding of the basics of information security management. 2 Risk Assessment: The organization's information assets value of the assets, threats, vulnerability analysis, to assess the organization of information security risks, choose the appropriate measures to achieve the purpose of risk management methods. 3 Management Planning: According to the organization's strategy for information security risks, develop appropriate information security overall planning, management planning, technical planning, a complete information security management system. 4 system implementation stage: ISMS set up (system files released implementation), want to test their effectiveness and stability through a trial run for a certain time. 5 certification audit stage: after a certain time to run, ISMS reach a steady state, the complete document and records have been established at this time, may be submitted for certification. [3]