Analyst Allocation System, Analyst Allocation Method, and Analyst Allocation Program

摘要

To make incident monitoring service of SOC efficient.SOLUTION: An automatic allocation server 105 stores analyst capability information which includes a treatment processing time required for treatment of an incident type about each of a plurality of analysts. A control unit 502 is configured to: receive a new incident; generate a first formula indicating a new incident treatment processing time of the analyst for each analyst, based on an allocation variable indicating the presence/absence of the analyst's allocation to the new incident and the treatment processing time for the new incident by the analyst; calculate an unprocessed treatment processing time required for the treatment of an unprocessed incident which is already allocated to the analyst; generate a second formula indicating the total treatment processing time of the analyst, based on the first formula and the unprocessed treatment processing time; set the greatest treatment processing time calculated from the second formula of the plurality of analysts as an evaluation function; search for an optimum solution of the allocation variable based on the evaluation function; and determine the analyst's allocation to the new incident.SELECTED DRAWING: Figure 5