| 摘要 |
<p><P>PROBLEM TO BE SOLVED: To more properly manage information assets. <P>SOLUTION: An information processor reads out importance level policy information defining pieces of importance level information indicating importance levels of an information asset and conditions associated with each piece of the importance level information from a storage unit, determines whether one information asset stored in the storage unit meets any conditions defined by the importance level policy information, and designates importance level information associated with the conditions determined to be met by the one information asset as importance level information of the one information asset. Then, the information processor reads out vulnerability policy information defining management item values indicating values for management items of an information asset and vulnerability information associated with the management item values that indicates vulnerability of the information asset from the storage unit, and designates vulnerability information of the vulnerability policy information meeting management item values of the one information asset as vulnerability information of the one information asset. Then, the information processor outputs the designated importance level information and vulnerability information of the one information asset to realize proper management of information assets. <P>COPYRIGHT: (C)2012,JPO&INPIT</p> |
