Abstract: A measure selecting apparatus determines whether a vulnerability of a resource employed in a predetermined task has been addressed or not based on information stored in a memory. When the vulnerability of the resource is determined not to have been addressed and when a recovery time defined in the memory corresponding to the resource is longer than a predetermined time, the measure selecting apparatus evaluates measures defined in the memory corresponding to the vulnerability determined not to have been addressed, and calculates an evaluation value of each measure. The measure selecting apparatus selects a measure with a high evaluation value.

Abstract: A measure selecting apparatus includes, a measure candidate selecting unit that calculates, evaluation values indicating the degree of effectiveness of each measure and selects candidates for a measure to be performed. This calculation is performed on the basis of measure data or the like in which a resource included in the business, a measure performed on the resource, and information indicating the length of recovery time of the resource at the time of performing the measure are defined. Measure selecting apparatus also includes an optimum measure selecting unit that selects, in accordance with the evaluation values and the number of same measures included in the candidates selected by the measure candidate selecting unit, a measure to be performed from among the candidate selected by the measure candidate selecting unit.

Abstract: A measure selecting apparatus includes a vulnerability handling determining unit and an optimum measure selecting unit. The determining unit determines the handling status of each vulnerability of a resource in a task used to develop a measure, based on vulnerability master data in which a resource, a vulnerability of the resource, and a recovery time associated with the vulnerability are defined in an associated manner; measure master data in which a vulnerability defined in the vulnerability master data and a measure for eliminating a vulnerability are defined in an associated manner; and measure status data in which a performance status of each measure defined in the measure master data is defined. The selecting unit selects a measure, from among measures defined in the measure master data, based on a recovery time that is defined and associated with a vulnerability determined to have not been handled by the determining unit.