Patent ID: 8539546

Claim:
A security monitoring apparatus for managing at least one terminal device, comprising: a CPU; and a memory operable connected to the CPU and storing a management program a collection program, and a non-target policy monitoring program; the management program, when executed by the CPU and, when applying a security policy to each of the terminal devices, manages the security policy by classifying items of the security policy into a set item which is set as an item of the security policy and a non-set item which is not set as an item of the security policy; the collection program, when executed by the CPU, monitors the occurrence of a causal event, which may possibly cause a threat with respect to the non-set item on each of the terminal devices, and collects information regarding the occurrence of the causal event; the non-target policy monitoring program, when executed by the CPU, a change of the causal event based on the information regarding the causal event.