With the rise of hack events, critical infrastructure(CI) and industrial control system(ICS) security become more important to the government. Resources and regulations are necessary in order to preventing possible threats. This research aim at CI of water field. By the process of practical interview, we propose some management and protection guides for ICS information security. The results can be the guideline for related fields.