Abstract: A security management and audit of a business information system in accordance with an information security policy is simplified. Provided is a security management and audit program database 133 in which the information security policy and an object system correspond to management and audit programs. The management and audit program corresponding to a range of the information security policy and the object system, which are designated by an operator, is retrieved and automatically executed. The management and audit program performs a management and audit concerning an information security policy of an object system corresponding to itself.

Abstract: A security management and audit of a business information system in accordance with an information security policy is simplified. Provided is a security management and audit program database 133 in which the information security policy and an object system correspond to management and audit programs. The management and audit program corresponding to a range of the information security policy and the object system, which are designated by an operator, is retrieved and automatically executed. The management and audit program performs a management and audit concerning an information security policy of an object system corresponding to itself.

Abstract: A method of conducting a connectionless communication in a network communication system including a client, a server, and a plurality of proxy servers which are disposed on a transmission path between the client and server. The communication is accomplished by use of specification of a communication address thereof and a port number dynamically assigned by the computer. (a) The server transmits own communication address and own port number to the client. (b) The client transmits own communication address and own port number as well as the communication address and port number of the server to a first adjacent proxy server computer. (c) The N-th (N≧1) proxy server transmits own communication address and own server side port number as well as the communication address and the port number of the server to an (N+1)-st proxy server. (d) step (e) is repeatedly executed by incrementally increasing N until the (N+1)-th proxy server becomes a terminal proxy server.