To decide the selection of information security solution, a Multi attribute decision making method was given. The factors which affected the selection were analyzed, including the expense of purchasing the security devices, the cost of operating and maintaining the security measurements, the effectiveness of the solution to reduce the risks. By the computation of some indexes related to the factors, an order of the solutions was obtained to show the priority, and the best one can be selected by the order. Based on the method, the factors which influenced the decision got balance, and the method was compact and efficient.