Patent ID: 8844029

Claim:
A risk model correcting system comprising: a risk model storing section comprising circuitry configured to store a correspondence relation of a group of threats of a risk, a parameter indicating a magnitude of each of the threats of the group, a group of measures for decreasing the threats, and a parameter indicating an effect of each of the measures as a risk model; an information collecting section comprising circuitry configured to collect a measure adopted for an analysis target system as adoption measure data; a risk analyzing section comprising circuitry configured to calculate a magnitude of the risk in said analysis target system as a risk value based on said risk model and said adoption measure data; an influence degree calculating section comprising circuitry configured to calculate an influence degree of existence or nonexistence of the adopted measure on a calculation result of said risk value, wherein the influence degree is calculated from a weigh of a threat and effect of a measure included in the risk model storing section; a parameter adjustment candidate extracting section comprising circuitry configured to extract each of the threats or each of measures, for the parameter indicating a magnitude of each of the threats or indicating an effect of each of the measures to be adjusted, as a parameter adjustment candidate based on the influence degree, wherein the parameter adjustment candidate comprising circuitry extracting section extracts at least one of the measure being not practiced while the influence degree is high and the measure being practiced while the influence degree is low as said parameter adjustment candidate; a reason displaying section comprising circuitry configured to display the parameter adjustment candidate; and a parameter adjusting section comprising circuitry configured to adjust the parameter related to each of the threats or each of the measures.