As the Internet plus initiative is put forward, archival information construction makes progress quickly, in which security construction is a fundamental and safeguard portion. This paper analyzes firstly the vulnerability and network attack, which are primary security threats of archival information construction. Secondly, this paper summarizes security vulnerabilities, which exist in fundamental network, computing environment, application system, data resources and user access. Then effective security recommendations and measures are proposed from several aspects, such as network, computer, application, information, customer, etc. Finally, the next work direction is presented.