| 摘要 |
PROBLEM TO BE SOLVED: To support risk management self evaluation for a risk which can not be classified in a job structure. SOLUTION: When the name of a system which is an asset to be the object of the evaluation of control and the management stipulation of the system are input, an extraction processing part 5 displays an specific risk classification corresponding to the management stipulation, an assumed loss event, an assumed loss scale, loss scenario, a kind of a loss event, a control classification and a control document. When one row on a screen is selected, a collation processing part 6 displays the image for evaluation of the control included in the selected row. An operation processing part 7 operates the evaluation value of the control evaluated as effective on the screen, computes the improvement necessary/unnecessary determination score of the control using the value of the assumed loss scale and the evaluated value of the control, and displays a risk management self evaluation database reflecting the score as a risk management self evaluation database slip on the screen at an output device 3. COPYRIGHT: (C)2010,JPO&INPIT
|
