To provide a security countermeasure supporting system capable of appropriately determining a cyber attack on a plant without relying on persons familiar with knowledge on plant facilities and cyber security.SOLUTION: The security countermeasure supporting system includes: abnormality determination means for determining whether an abnormality in data acquired from a plant control device or a monitoring operation device is due to a cyber attack; influence level determination means for analyzing parameter information of data having abnormality determined to be due to the cyber attack by the abnormality determination means based on a cyber attack scenario, a risk caused by the cyber attack, and vulnerability of a plant facility to the cyber attack, and calculating a possibility of propagation to the plant facility; and display means for displaying a countermeasure for the plant facility based on a result of the determination.SELECTED DRAWING: Figure 1
展开▼
