Abstract: Security measures taking into consideration significance of handled information is made applicable and prevents security requirement to be set in the system from missing, in system security design. In supporting requirement defining and measures planning, the system as the target of design is indicated divided in a plurality of zones and is classified into a path 420 communicably coupling the zones, a zone boundary 419 being a coupling part between the path 420 and each zone, and an in-zone 418, and has associated and registered to each a security requirement 403 and security measures 413 having measures to be taken divided into levels. The path 420 has also associated a level of transmitted data and the level 409 of the corresponding zone boundary 419 is determined according to the transmitted data level of the path.

Abstract: An information management device collects from a plurality of equipment and retains operation information being information that indicates operation statuses of the plurality of equipment, and refers with an information utilizing device that provides a service that utilizes the operation information, including retaining information relating to a contract that has defined a service level provided in relation to the equipment, acquiring the contract information of the equipment, and creating based on the contract information management policy information being information that defines a management scheme of the operation information retained for each of the equipment, to include storage location information being information of a storage location of at least each of the storage information.