Information security evaluation apparatus and information security evaluation method and information recording medium for recording a security evaluation program

摘要

PROBLEM TO BE SOLVED: To quickly evaluate and select countermeasures to protect information assets from security accidents.;SOLUTION: A countermeasure sufficiency rate calculating means (5) calculates the sum of the risk reduction rates of each evaluation item from a countermeasure definition file (2) in which a candidate countermeasure name and the risk reduction rate of each candidate countermeasure and an evaluation item name corresponding to each candidate countermeasure are described and inputted application countermeasure name data (4), and calculates the sum of the risk reduction rates of the application countermeasures among the countermeasures corresponding to the evaluation item in response to the sum, and calculates the rate of the two sums as a countermeasure sufficiency rate.;COPYRIGHT: (C)2002,JPO