A computer program for causing a management system according to claim 7 to execute the following: executing a cause analysis of an event (EV3, EV6, 33510) that has occurred in any one of the plurality of management target devices (SYS1, HOST1) and specifying a first cause event that is a candidate of a cause of the event (EV3, EV6, 33510) that has occurred based on one or more rules (33550, Rule-1, Ex-Rule-1) indicating a correspondence relationship between a cause event related to any one of the plurality of management target devices and one or more condition events related to any one of the plurality of management target devices (SYS1, HOST1) that is a condition under which the cause event is a cause; calculating a certainty factor indicating the certainty of the cause event being the cause for each cause event of one or more rules in the cause analysis of an event that has occurred, and specifying the first cause event based on the certainty factor; specifying a plurality of first plans (Plan1) that can be executed in the case in which the first cause event is a cause, based on plan information indicating a correspondence relationship between the rule (33550, Rule-1, Ex-Rule-1) and a plan (ExPlanl-1, ExPlan 1-2, ExPlan 1-3) that is a recovery measure that can be executed in the case in which a cause event of the rule is a cause; calculating an index value indicating a possibility of succeeding in a failure recovery in the case in which the plan is executed for each of the plurality of first plans, based on the plan history information indicating the execution date and time and the success or failure of a failure recovery when the plan is executed; displaying data indicating any one or more plans of the plurality of first plans according to a display mode; extracting one or more plans in which the index value is equal to or larger than a predetermined value from the plurality of first plans and displaying data indicating the one or more extracted plans; arranging and displaying the one or more extracted plans in an order from larger index value; and executing a second plan in which the index value is largest for the plurality of first plans in the case in which the certainty factor of the first cause event is equal to or larger than a predetermined value. executing a cause analysis of an event (EV3, EV6, 33510) that has occurred in any one of the plurality of management target devices (SYS1, HOST1) and specifying a first cause event that is a candidate of a cause of the event (EV3, EV6, 33510) that has occurred based on one or more rules (33550, Rule-1, Ex-Rule-1) indicating a correspondence relationship between a cause event related to any one of the plurality of management target devices and one or more condition events related to any one of the plurality of management target devices (SYS1, HOST1) that is a condition under which the cause event is a cause; calculating a certainty factor indicating the certainty of the cause event being the cause for each cause event of one or more rules in the cause analysis of an event that has occurred, and specifying the first cause event based on the certainty factor; specifying a plurality of first plans (Plan1) that can be executed in the case in which the first cause event is a cause, based on plan information indicating a correspondence relationship between the rule (33550, Rule-1, Ex-Rule-1) and a plan (ExPlanl-1, ExPlan 1-2, ExPlan 1-3) that is a recovery measure that can be executed in the case in which a cause event of the rule is a cause; calculating an index value indicating a possibility of succeeding in a failure recovery in the case in which the plan is executed for each of the plurality of first plans, based on the plan history information indicating the execution date and time and the success or failure of a failure recovery when the plan is executed; displaying data indicating any one or more plans of the plurality of first plans according to a display mode; extracting one or more plans in which the index value is equal to or larger than a predetermined value from the plurality of first plans and displaying data indicating the one or more extracted plans; arranging and displaying the one or more extracted plans in an order from larger index value; and executing a second plan in which the index value is largest for the plurality of first plans in the case in which the certainty factor of the first cause event is equal to or larger than a predetermined value.