Most common Business objectives play around profitability, productivity, Marketing share, Customer services, competitive analysis, and others. Information Security management is required to align their objective with business goals. of course any business goals have to achieved using a proper business strategy and from business strategy a strong information security strategy that based on: -Risk Management plan that directly affect the business strategy and define threats, vulnerabilities, and risk for the critical information assets that could impact business process. -Value Delivery that optimal security investment occur when strategic goals for security are achieved with acceptable risk in lowest price. -Measurement of information security could keep you up to date for any deviation of information security strategy and consequently go far from business strategy. -Assurance of information security could be implemented by a periodic audit for all process developed and compiled from security strategy and compliance with international standard by this way security management will be very good to support business goals