METHOD AND APPARATUS FOR MEASUREMENT OF INFORMATION-SECURITY-CONTROLLING STATUS

摘要

According to the present invention, a method for evaluating an information security control state comprises: a step of receiving actual inspection data which is acquired by inspecting whether each security control item is observed per domain; a step of calculating a security control state evaluation score based on a priority grade of each control item, an observing degree of a relevant control item, and a weighting configured by an evaluator; a step of calculating a security control state final evaluation score of a higher ranking organization to which each of the domain belongs based on an average score of the security state evaluation score per each of the domain; and a step of outputting the calculated security control state evaluation score and the security control state final evaluation score.