PROBLEM TO BE SOLVED: To improve efficiency of SOC incident monitoring work. SOLUTION: The automatic allocation server 105 stores analysis sensory force information including handling processing time required for handling an incident type for each of a plurality of analysts, and a control unit 502 accepts a new incident, and each analyst receives. For, regarding the assigned variable indicating whether or not the analyst is assigned to the new incident, and the response processing time for the new incident by the analyst, the first expression indicating the new incident response processing time for the analyst is generated, and Calculates an unprocessed coping process time required for coping with an unprocessed incident that has been assigned to, and generates a second formula indicating the total coping process time of the analyst based on the first formula and the unprocessed coping process time. Then, the maximum coping processing time calculated from the second formula of multiple analysts is used as the evaluation function, and the optimal solution of the allocation variable is searched based on the evaluation function to determine the allocation of the analysts to the new incident. To configure. [Selection diagram] Fig. 5
展开▼
