Purpose/Significance To investigate and analyze the current situation of health industry network security in Shandong province, to pinpoint the network security weaknesses, and to improve the decision-making capacity of risk management.Method/Process Based on the data collected by questionnaires, the gap analysis of network security is conducted from the two dimensions of the level and regional distribution of medical institutions.Result/Conclusion In view of the problems faced by the informatization construction of primary medical and health institutions at the management level and the technical protection level, the specific solutions to the network security governance of health industry are put forward.