INFORMATION PROTECTION METHOD, INFORMATION SECURITY MANAGEMENT DEVICE, INFORMATION SECURITY MANAGEMENT SYSTEM AND INFORMATION SECURITY MANAGEMENT PROGRAM

摘要

PROBLEM TO BE SOLVED: To attain the determination of information processing operations with a security policy (SP) as a criterion of propriety determination and the relatively simple determination of the propriety of the information processing operations. SOLUTION: An information security management system manages an object to be managed for information protection in an institution configured for implementing business purposes, and supports the SP preparation of a plurality of items to be observed by the institution, and sub-divides the data of SP into management target-categorized application parts according to the contents of the items (S100), and determines whether or not the information processing operations are proper, and reports impropriety when the information processing operations are improper (S120), and diagnoses the defect of an in-house information protection system based on the determination result (S171), and prepares an audit report concerning the in-house information protection system based on the diagnostic result (S181), and updates the non-subdivided SP data according to the diagnostic result, and automatically updates the corresponding subdivided SP data into the contents of the updated SP data part in accordance with which of the management object categorized subdivided SP data corresponds to the updated SP data part (S100). COPYRIGHT: (C)2006,JPO&NCIPI