INFORMATION SECURITY MANAGMENT SYSTEM SUPPORTING INTER-MAPPING BETWEEN EACH DIFFERENT INFORMATION SECURITY INDEX AND METHOD THEREOF

摘要

An information security management system supporting inter-mapping between different information security indexes are provided to calculates an information security value according to information security indexes that a user defines by mapping only security indexes which are proper to a user situation. A risk analyzing group(20) analyzes the risk, threat, risk degree of information property group, and an index management group(40) stores information security indexes and user definition indexes. An index operating member generates user definition indexes through mutual mapping between information security indexes. An index mapping unit(31) generates user definition indexes by extracting and mapping the common items of small classification, and an index result outputting group(32) outputs the evaluation values of information security to a display. A user definition index database(41) stores the user definition indexes.