Abstract: In order to ensure the information security of the railway information system, improve the information security management ability of China Railway, this article developed the railway development and testing cloud management platform, standardized the development and testing process of the project, implemented the effective closure of the development and testing links, and ensured that the information system went through strict security testing before it went online. It is planned to pilot in the research and development process of railway information system.