DEVICE FOR EVALUATING INFORMATION SECURITY, METHOD FOR THE SAME AND RECORDING MEDIUM WITH INFORMATION SECURITY EVALUATION PROGRAM RECORDED

摘要

PROBLEM TO BE SOLVED: To quickly evaluate and select countermeasures to protect information assets from security accidents. SOLUTION: A countermeasure sufficiency rate calculating means (5) calculates the sum of the risk reduction rates of each evaluation item from a countermeasure definition file (2) in which a candidate countermeasure name and the risk reduction rate of each candidate countermeasure and an evaluation item name corresponding to each candidate countermeasure are described and inputted application countermeasure name data (4), and calculates the sum of the risk reduction rates of the application countermeasures among the countermeasures corresponding to the evaluation item in response to the sum, and calculates the rate of the two sums as a countermeasure sufficiency rate.