SYSTEM AND METHOD FOR ENTERPRISE IT SECURITY MANAGEMENT

摘要

An enterprise IT(Information Technology) security management system for systematizing and automating an IT security management procedure of an enterprise and a method thereof are provided to manage IT security vulnerability efficiently by systematizing and automating an IT security management procedure and a security level management procedure. An authentication manager(110) permits connection to a user. A reference information manager(120) stores and manages reference information. A new security diagnostic unit(130) diagnoses security vulnerability of a newly opened service equipment. A periodical security diagnostic unit(140) periodically diagnoses the security vulnerability of the service equipment. A service system condition manager(150) checks whether a current service agrees to a rule of a firewall. An infringement accident manager(160) notifies an infringement accident manager of an infringement accident. A PC security manager(170) checks the vulnerability of a shared folder and an account of a PC, and performs security management for the PC.