JP3952983B2 - Security audit device, security audit method, and security audit program - Google Patents

Description

【００５３】
［回答］
設問（１）に対する回答 Ａ（設問（６）の実施基準に該当する（実施しない））
設問（２）に対する回答 Ａ（設問（６）の実施基準に該当する（実施しない））
設問（３）に対する回答 Ｂ（設問（６）の実施基準に該当しない（実施する））
設問（４）に対する回答 Ｂ（設問（６）の実施基準になし（実施する））
設問（５）に対する回答 Ｂ（設問（６）の実施基準に該当する（実施する））
設問（６）に対する回答 未回答（当該設問実施判断の対象である設問）
【００５４】
このとき、設問実施基準リストに登録された基準に該当し、「実施しない」とされている場合に実施ポイントとして−１を、「実施する」とされている場合に実施ポイントとして＋１を付与し、実施ポイントの付与対象外である場合については、何もしないとすると、各設問を実行するごとに各設問の実施ポイントは、以下のように算出される。なお、便宜上、実施ポイントの初期値を０とし、実施ポイントの付与が行われない場合は、０を加算する形式で表示している。これは、以降のパターンの説明においても同様である。
【００５５】
［各設問の実施ポイント］
設問（１）の実施ポイント ０
設問（２）の実施ポイント ０
設問（３）の実施ポイント ０
設問（４）の実施ポイント ０
設問（５）の実施ポイント ０
設問（６）の実施ポイント −１−１＋０＋０＋１＝−１
【００５６】
したがって、設問（６）は、設問（１），（２），（５）に対する設問実施可否判断処理において、設問実施基準リストに該当し、実施ポイントの付与が行われ、設問（６）を質問する順番となったときに、その実施ポイントが−１となっているため、表示は行われず、当該設問は実施されないこととなる。
なお、上記設問実施基準リストにおいて、設問（５）の回答にもとづく実施基準として、「実施する」が設定されているが、設問実施基準リストに「実施しない」のみを設定するように運用することはもちろん可能である。これは、以降のパターンについても同様である。
【００５７】
＜パターン２＞
次に、「実施しないと設定されている基準に該当しない設問に対し、実施するとのポイントを付与する場合」について説明する。
設問リストの回答選択肢、設問実施基準リスト、および回答は、パターン１におけるものと同様であるとする。
この場合、設問（１），（２），（４），（５）が実施された場合の未回答の設問である設問（６）についての実施ポイントの設定は、パターン１の場合と同様である。
【００５８】
しかし、本パターンでは、設問（３）についての実施ポイントの設定において、設問（６）の実施基準として、「設問３に対して回答Ａの場合、実施しない」が登録されており、設問（３）に対する回答として、「Ｂ」が入力された場合、「実施する」の実施ポイントを付与する処理を実行する。
この具体的な処理方法は、種々のものとすることができるが、例えば、設問判断部１４に入力された回答に対応する設問（設問（３））にもとづいて、設問実施基準リストを検索し、設問が登録されているものの、この設問に対応する回答として、入力された回答と異なる回答（「Ａ」）が登録されている場合には、この設問に対応する実施可否基準として登録されている実施可否基準（「実施しない」）の逆の実施ポイント（＋１）を付与することにより行うことができる。
設問実施可否判断処理をこのようにすると、各設問ごとの実施ポイントは、次のようになる。
【００５９】
［各設問の実施ポイント］
設問（１）の実施ポイント ０
設問（２）の実施ポイント ０
設問（３）の実施ポイント ０
設問（４）の実施ポイント ０
設問（５）の実施ポイント ０
設問（６）の実施ポイント −１−１＋１＋０＋１＝０
【００６０】
したがって、設問（６）は、設問（１），（２），（５）に対する設問実施可否判断処理において、設問実施基準リストに該当するともに、設問（３）に対する設問実施可否判断処理において、設問実施基準リストに該当しないが、実施ポイントの付与が行われることによって、設問（６）を質問する順番となったときに、その実施ポイントが０となり、当該設問は表示され、実施されることとなる。
【００６１】
＜パターン３＞
次に、「実施しないと設定されている基準に該当しない設問に対し、その設問に対する実施基準が登録されていない場合も含めて、すべて実施するとのポイントを付与する場合」について説明する。
設問リストの回答選択肢、設問実施基準リスト、および回答は、パターン１におけるものと同様であるとする。
【００６２】
この場合、設問（１）は、最初の設問であるため、設問実施可否判断の対象とされず、設問（２）〜（５）については、設問実施基準リストに設問実施基準が登録されていないため、各設問を実施するたびに行われる未回答の設問に対する実施可否判断は、すべて「実施する」と判断され、それぞれ実施ポイントとして＋１が付与される。
また、設問（６）については、設問（１）および設問（２）の実行時における実施可否判断が、「実施しない」となり、これら以外の設問については、すべて「実施する」ものと判断されて、それぞれ実施ポイントが付与される。
その結果、各設問の実施ポイントは、以下のようになり、設問（６）は、実施されることとなる。
【００６３】
［各設問の実施ポイント］
設問（１）の実施ポイント ０
設問（２）の実施ポイント ＋１
設問（３）の実施ポイント ＋１＋１＝＋２
設問（４）の実施ポイント ＋１＋１＋１＝＋３
設問（５）の実施ポイント ＋１＋１＋１＋１＝＋４
設問（６）の実施ポイント −１−１＋１＋１＋１＝＋１
【００６４】
なお、本実施形態における実施ポイントの設定処理や、この実施ポイントにもとづく設問実施可否判断処理は、上記のものに限定されるものではなく、実施ポイントを用いて設問の実施可否判断を制御することのできる範囲において、種々ものとすることができる。
また、本実施形態においては、設問の回答入力を被監査者が行うものとしているが、監査者が被監査者に質問を行って、監査者により回答を入力するように運用することももちろん可能である。
さらに、付与する実施ポイントとして、設問ごとに異なる値を設定するようにすることもできる。例えば、設問記憶部１２の設問実施基準リストにおいて、各実施基準ごとに付与すべき実施ポイントを保有させ、これにもとづいて、所定の設問について「実施しない」と判断された場合に、−５ポイントを付与するなどとすることもできる。これにより、設問の重要度に応じて、実施対象とする設問をきめ細かく調整することが可能となる。
【００６５】
以上説明したように、本実施形態のセキュリティ監査装置によれば、あらかじめ設問同士の回答の矛盾点をあらかじめリストアップして登録しておくことによって、回答入力のたびにこのリストを自動的に検索し、設問に対して矛盾した回答がないかどうかをその場でリアルタイムに確認することが可能となる。
このため、セキュリティ監査の実施者の負担が軽減されると同時に、回答に対する正当性を保障することが可能となる。
また、回答に矛盾点がある場合に、矛盾していることを被監査者に通知して注意を促した上で、被監査者自身が再度回答を行うことが可能となる。
【００６６】
さらに、あらかじめ設問同士の関連性を設問実施基準リストとして登録しておくことによって、回答入力のたびに次に表示すべき設問を自動的に絞り込むことができ、一連の設問をすべて実施する必要がなくなることから、監査実施者、被監査者双方の監査の負担を軽減することが可能となる。
加えて、各回答ごとに未回答の設問の実施可否を設問実施基準リストにもとづき判断し、その判断結果を実施ポイントとして記憶することができ、各設問を実施する順番になったときに、この実施ポイントにもとづいて、実際に設問を表示するか否かを判断することが可能となる。
【００６７】
［第二実施形態］
次に、本発明の第二実施形態について、図４を参照して説明する。同図は、本実施形態のセキュリティ監査装置における設問表示処理手順を示すフローチャートである。
本実施形態は、実施しないと判断される設問に対して、設問実施基準リストにもとづき回答を決定し、当該設問にこの回答を変更入力可能な状態でセットして表示する点で第一実施形態と異なる。その他の点については、第一実施形態と同様であり、本実施形態のブロック図も図１と同様のものを用いることができる。ただし、本実施形態においては、設問判断部１４によって、変更入力後の回答が回答記憶部１１に登録される場合がある。
【００６８】
まず、セキュリティ監査装置１０に設問を表示する動作から次の設問があるかどうかを判断するまでの動作（ステップ３０〜ステップ３６）については、第一実施形態における動作（ステップ１０〜ステップ１６）と同様である。
また、ステップ３７において、実施ポイントが０以上である場合に（ステップ３７のＹｅｓ）、次の設問を表示し（ステップ３８）、その設問に対する回答入力から処理を繰り返す動作についても、第一実施形態における動作（ステップ１７のＹｅｓ，ステップ１８）と同様である。
次に、設問判断部１４は、実施ポイントが０より小さい場合に（ステップ３７のＮｏ）、設問実施基準リストにもとづいて、当該設問に対する回答を決定して、この回答をセットして次の設問を表示部１６に表示する（ステップ３９）。
【００６９】
この回答の決定処理は、例えば、図３の設問実施基準リストＤ４の（ａ）に該当する場合、設問（４）の回答として、自動的に「Ｂ．していない」を設定することができる。
すなわち、Ｄ４の（ａ）は、「設問（３）に対して、Ｂ．作成していないと答えた場合、設問を実施しない」と登録されていることから、設問（４）についても同様に、この設問（３）に対する回答と同様に、否定的回答としての「Ｂ．していない」を選択して決定するようにすることができる。
【００７０】
このようにして表示された設問および回答に対して、被監査者は、その回答を確認し、そのまま登録することができる。このとき、被監査者により入力部１５から入力された登録要求にもとづいて、設問判断部１４が、当該回答を回答記憶部１１に記憶する。
また、表示されている回答が、被監査者により変更された場合も、同様にして、この変更された回答を、被監査者により入力部１５から入力された登録要求にもとづいて、設問判断部１４が、当該回答を回答記憶部１１に記憶する。そして、設問判断部１４は、次の設問を検索して同様の処理を実行するため、ステップ３５からの処理を繰り返す（ステップ４０）。
なお、本実施形態のステップ３９において、回答を決定した後に、これをセットした設問を表示して、被監査者による必要な変更入力（ステップ４０）を可能ならしめるのではなく、決定した回答を被監査者により入力された回答と擬制して、そのまま回答記憶部１１に記憶するようにすることも可能である。
【００７１】
以上説明したように、本実施形態のセキュリティ監査装置によれば、設問実施基準リストに、所定の設問に対して所定の回答が入力された場合に実施しないものとして登録されている設問について、その設問実施基準リストにもとづき回答付きでその設問を表示することができる。
このため、被監査者が誤って他の回答と矛盾した回答を行うことを防止することができるとともに、間違った回答を行っているのではないかというチェックを行うことも可能となる。
【００７２】
また、このような設問について、回答付きで表示するのではなく、実施されたものと擬制して、設問実施基準リストにもとづきその回答を回答記憶部１１に記憶することも可能となる。
これにより、単に、設問の実施を省略することができるのみならず、その設問を実施したものとして、回答結果を決定し、後の集計に反映させることも可能となる。
【００７３】
［第三実施形態］
次に、本発明の第三実施形態について、図５を参照して説明する。同図は、本実施形態のセキュリティ監査装置における設問表示処理手順を示すフローチャートである。
本実施形態は、設問実施可否の判断を、実施ポイントを用いて制御するのではなく、実施可否フラグを用いて制御する点で第一実施形態と異なる。その他の点については、第一実施形態と同様であり、本実施形態のブロック図も図１と同様のものを用いることができる。
【００７４】
まず、セキュリティ監査装置１０に設問を表示する動作から、回答に矛盾がある場合に再度回答を行うかどうかを判断するまでの動作（ステップ５０〜ステップ５３）については、第一実施形態における動作（ステップ１０〜ステップ１３）と同様である。
次に、本実施形態においては、設問判断部１４が、入力された回答および設問実施基準リストにもとづいて、Ｎ＋１番目以降の設問に、実施可否フラグを設定する（ステップ５４）。
【００７５】
この実施可否フラグの設定にあたっては、例えば、各設問ごとに設問記憶部１２に初期値として「実施する」ことを示すフラグを設定しておき、上記実施可否判断において、実施しないと判断された設問について、そのフラグを「実施しない」に更新するようにすることができる。
また、この設問に対して、次に「実施する」と判定された場合には、そのフラグを「実施する」に更新するようにして、最後に判断された実施可否判断を適用するようにするほか、先に登録された「実施しない」を優先適用することとして、以降の更新を受付けないようにすることも可能である。
その他、設問実施基準リストにおける実施基準ごとに、実施可否フラグの設定の優先順位を保有させ、この優先順位にもとづき実施可否フラグの更新を行うようにすることも可能である。
【００７６】
これ以降の動作（ステップ５５〜ステップ５８）については、第一実施形態における動作（ステップ１５〜ステップ１８）と同様であるが、本実施形態のステップ５７における実施可否判断は、実施可否フラグが「実施する」であるか、「実施しない」であるかにもとづいて行われる。
【００７７】
以上説明したように、本実施形態のセキュリティ監査装置によれば、各回答ごとに未回答の設問の実施可否を設問実施基準リストにもとづき判断して、その判断結果を実施可否フラグとして記憶することができ、各設問を実施する順番になったときに、この実施可否フラグに従って、その設問の表示／非表示を制御することが可能となる。
【００７８】
上記の実施形態における矛盾点の抽出や、設問実施可否判断等は、セキュリティ監査プログラムにより実行される。
このセキュリティ監査プログラムは、コンピュータの各構成要素に指令を送り、所定の処理、例えば、矛盾点の抽出処理や、設問実施可否判断処理等を行わせる。
これによって、これらの処理は、セキュリティ監査プログラムとコンピュータとが協働したセキュリティ監査装置により実現される。
【００７９】
なお、セキュリティ監査プログラムは、コンピュータのＲＯＭやハードディスクに記憶させる他、コンピュータ読み取り可能な記録媒体、たとえば、外部記憶装置及び可搬記録媒体等に格納することができる。
外部記憶装置とは、磁気ディスク等の記録媒体を内蔵し、セキュリティ監査装置などに外部接続される記憶増設装置をいう。一方、可搬記録媒体とは、記録媒体駆動装置（ドライブ装置）に装着でき、かつ、持ち運び可能な記録媒体であって、たとえば、ＣＤ−ＲＯＭ、フレキシブルディスク、メモリカード、光磁気ディスク等をいう。
【００８０】
そして、記録媒体に記録されたプログラムは、コンピュータのＲＡＭにロードされて、ＣＰＵにより実行される。この実行により、上述した本実施形態のセキュリティ監査装置の機能が実現される。
さらに、コンピュータでセキュリティ監査プログラムをロードする場合、他のコンピュータで保有されたセキュリティ監査プログラムを、通信回線を利用して自己の有するＲＡＭや外部記憶装置にダウンロードすることもできる。
このダウンロードされたセキュリティ監査プログラムも、ＣＰＵにより実行され、本実施形態の矛盾点の抽出処理や、設問実施可否判断処理等を実現する。
【００８１】
なお、本発明は以上の実施形態に限定されるものではなく、本発明の範囲内において、種々の変更実施が可能であることは言うまでもない。
例えば、上記各実施形態におけるセキュリティ監査装置を組合せたものとすることが可能である。すなわち、第二および第三実施形態を組合せて、実施可否フラグを用い、かつ、設問実施基準リストにもとづき「実施しない」と判断される設問について、回答付きで表示するようにすることなどが可能である。
また、回答判断部１３および設問判断部１４の機能の切り分けや、回答記憶部１１および設問記憶部１２に記憶させるデータの切り分けを、上述の本発明の機能が実現される範囲内において変更するなど適宜変更することが可能である。
【００８２】
【発明の効果】
以上のように、本発明によれば、あらかじめ設問同士の回答の矛盾点をリストアップして登録しておくことによって、回答入力のたびにこのリストを自動的に検索し、設問に対して矛盾した回答がないかどうかをその場でリアルタイムに確認することが可能となる。
このため、セキュリティ監査の実施者の負担が軽減されると同時に、回答に対する正当性を保障することが可能となる。
また、回答に矛盾点がある場合に、矛盾していることを被監査者に提示して注意を促した上で、被監査者自身が再度回答を行うことが可能となる。
【００８３】
さらに、あらかじめ設問同士の関連性を実施基準リストとして登録しておくことによって、回答入力のたびに次に表示すべき設問を自動的に絞り込むことができ、一連の設問をすべて実施する必要がなくなることから、監査実施者、被監査者双方の監査の負担を軽減することが可能となる。
加えて、各回答ごとに未回答の設問の実施可否を設問実施基準リストにもとづき判断して、その判断結果を実施ポイントや実施可否フラグとして記憶することができ、各設問を実施する順番になったときに、この実施ポイントや実施可否フラグにもとづいて、実際に設問を表示するか否かを判断することが可能となる。
【００８４】
さらに、設問実施基準リストに、所定の設問に対して所定の回答が入力された場合に実施しないものとして登録されている設問について、その設問実施基準リストにもとづき回答付きでその設問を表示することができる。
このため、被監査者が誤って他の回答と矛盾した回答を行うことを防止することができるとともに、間違った回答を行っているのではないかというチェックを行うことも可能となる。
【００８５】
また、このような設問について、回答付きで表示するのではなく、実施されたものと擬制して、設問実施基準リストにもとづきその回答を回答記憶部に記憶することも可能となる。
これにより、単に、設問の実施を省略することができるのみならず、その設問を実施したものとして、回答結果を決定し、後の集計に反映させることも可能となる。
【００８６】
このように、回答の矛盾チェックを行うとともに、設問が必要なものだけを実施したり、所定の設問については、回答付きで表示したり、あるいは回答の自動登録を行うことによって、セキュリティ監査にかかる時間および人員の負担が軽減され、回答や監査に必要なその他の事項に時間を割くことができることから、監査結果の精度を向上させることが可能となる。
【００８７】
また、セキュリティ監査プログラムは、コンピュータの各構成要素へ所定の指令を送ることにより、この矛盾点の抽出機能や、設問実施可否判断機能等を実現させることができる。
これによって、これらの機能等は、セキュリティ監査プログラムとコンピュータとが協働したセキュリティ監査装置により実現可能である。
【図面の簡単な説明】
【図１】本発明の実施形態のセキュリティ監査装置の構成を示すブロック図である。
【図２】本発明の第一実施形態のセキュリティ監査装置における設問表示処理手順を示すフローチャートである。
【図３】本発明の第一実施形態のセキュリティ監査装置における設問リスト，回答リスト，矛盾回答リスト，設問実施基準リストを示す図である。
【図４】本発明の第二実施形態のセキュリティ監査装置における設問表示処理手順を示すフローチャートである。
【図５】本発明の第三実施形態のセキュリティ監査装置における設問表示処理手順を示すフローチャートである。
【符号の説明】
１０ セキュリティ監査装置
Ａ 補助記憶装置
１１ 回答記憶部
１２ 設問記憶部
Ｂ データ処理装置
１３ 回答判断部
１４ 設問判断部
１５ 入力部
１６ 表示部[0001]
BACKGROUND OF THE INVENTION
In the security audit, the present invention displays a question having answer options, determines whether or not the answer is inconsistent with a past answer based on the answer inputted for the question, and if there is a contradiction, The present invention relates to a security audit apparatus, a method, and a program for correcting as necessary and selectively displaying subsequent questions.
[0002]
[Prior art]
Conventionally, in companies, etc., the security policy is properly observed, and it is judged whether the purpose of confidentiality, integrity, etc. has been achieved, and the security evaluation that makes the company's security and recommends improvement points, etc. An audit is being conducted.
In such a security audit, the person who performs the audit prepares a question for each audit target, asks the auditee one by one, analyzes the response manually each time, and reports the audit result. It was implemented by the method.
[0003]
However, this conventional method has a problem that the cost of auditing increases because it takes a lot of time to audit and prepare it and analyze the audit results instead of performing detailed audits for each audit target. . Also, since audits and analysis of audit results are performed manually, individual differences occur in identifying inconsistencies in answers to each question, and the results of audit analysis vary greatly depending on the skill of the auditor. There was also a problem.
On the other hand, regarding a security policy construction method, when there is a contradiction in answers, an invention that can solve the contradiction by executing a re-question has been proposed (see, for example, Patent Document 1).
[0004]
[Patent Document 1]
JP 2002-56176 A
[0005]
[Problems to be solved by the invention]
However, according to this conventional method, although all contradictions are eliminated as a result, in security audits, the contradictions should not always be resolved, so that more flexible processing should be possible. was there.
Further, it has not been possible to determine how each answer is related to an unanswered individual question and determine in detail the question to be displayed next.
[0006]
The present invention has been considered in view of the above circumstances, and in a security audit, a question having an answer option is displayed, and the answer is inconsistent with a past answer based on the answer input for this question. It is an object of the present invention to provide a security audit apparatus, method, and program capable of determining whether or not contradictions are corrected as necessary and selectively displaying subsequent questions.
[0007]
[Means for Solving the Problems]
  In order to achieve the above object, a security auditing apparatus according to claim 1 of the present invention is a security auditing apparatus that displays a question having an answer option and supports security auditing based on an answer input to the question. The answer storage unit that stores the input answer, and the contradictory answer information in which the answer to the question or one question has a pattern inconsistent with the correspondence between other questions and the answer for each question, Question execution standard information that holds criteria for determining whether or not a given question can be executed based on the correspondence between the question and the answerSearching for answers that contradict the inputted answer with respect to all answers stored in the answer storing part based on the question answering part storing the answer and the inputted answer and the contradictory answer information, If there are conflicting answers, output a message indicating that there are conflicting answers, and if necessary, display the question to re-enter the answer for the question corresponding to the entered answer A determination unit;Each time an answer is input, the question execution standard information is searched based on the input answer and the question corresponding to the input answer, and an execution propriety judgment obtained for each unanswered question is determined. A question determination unit that stores each question in the question storage unit and selectively displays subsequent questions based on the determination as to whether or not the implementation is possible, and the question determination unit is configured for each unanswered question. In accordance with the obtained feasibility determination, an execution point is assigned to each question and stored in the question storage unit, and the question is displayed only when the execution point satisfies a predetermined standard for subsequent questions. DoAs a configuration.
[0008]
If the security audit device is configured in this way, it is possible to automatically search each time an answer is entered by listing and registering inconsistencies between answers in advance. You can check in real time whether there are any contradictory answers.
For this reason, it is possible to reduce the burden on the security auditor and to ensure the correctness of the answer.
Also, if there are contradictions in the answers, the auditee himself / herself can make another reply after presenting the auditee to the auditee for caution. That is, even if there is a contradiction, if it is determined that the answer is valid, it can be left in a contradictory state.
[0010]
  Also,If the security audit device is configured in this way, the relevance between questions can be registered in advance as an implementation standard list (question execution standard information), and the question to be displayed next can be automatically narrowed down every time an answer is entered. it can.
  For this reason, once an answer to a question is decided, it is not necessary to conduct another question, and it is not necessary to carry out a series of questions. Therefore, the burden of auditing on both the auditor and the auditee is reduced. Is possible.
  Further, if the security auditing apparatus is configured as described above, it is possible to determine whether or not an unanswered question can be performed for each answer based on the question execution standard information, and store the determination result as an execution point.
  And when it becomes the order which implements each question, it becomes possible to judge whether a question is actually displayed based on this implementation point.
[0011]
  Claims of the invention2The security audit device described isThe question determination unit assigns a value corresponding to the importance for each question and stores it in the question storage unit as the execution point in accordance with the execution feasibility determination obtained for each unanswered question, For the following questions, the question is displayed only when the execution points meet the predetermined criteria.As a configuration.
[0012]
  A security auditing apparatus according to claim 3 of the present invention is a security auditing apparatus for displaying a question having an answer option and supporting security auditing based on the answer inputted for the question, wherein the inputted answer is displayed. Stored answer storage unit, question, answer of one question has a pattern that is inconsistent with the correspondence between other questions and answers for each question, information on a given question based on the correspondence between questions and answers The question storage unit that stores the question execution criteria information that holds the criteria for determining whether or not execution is possible, and the input for all answers stored in the answer storage unit based on the input answers and the contradictory answer information If there is a conflicting answer, a message indicating that there is a conflicting answer is output, and if necessary, An answer determination unit that displays the question in order to re-enter the answer for the question corresponding to the input answer, and each time an answer is input, the input answer and the question corresponding to the input answer Based on the above, the question execution standard information is searched, and the execution availability determination obtained for each unanswered question is stored for each question in the question storage unit, and the subsequent questions are asked based on this execution availability determination. A question determination unit that selectively displays, and the question determination unit sets an execution enable / disable flag for each question in accordance with an execution enable / disable determination obtained for each unanswered question. And the subsequent questions are selectively displayed based on the implementation flag.
[0013]
  With such a configuration of the security auditing apparatus, it is possible to determine whether or not an unanswered question can be executed for each answer based on the question execution reference information, and store the determination result as an execution enable / disable flag.
  And when it becomes the order which implements each question, it becomes possible to control the display / non-display of the question according to this execution propriety flag.
[0015]
  Claims of the invention4The security audit device described isFor the question determined not to be displayed by the question determination unit, an answer to the question determined not to be displayed is based on the answer associated with the question in the question execution standard information that is the basis of this determination. Determine and store the determined answer in the answer storage unitAs a configuration.
[0016]
  If the security audit apparatus is configured as described above, it is possible to register the answer based on the question execution standard information, assuming that the question is determined not to be displayed and the question is not executed and that the question is not executed.
  As a result, it is possible not only to omit the execution of the question, but also to determine the answer result as having been executed and reflect it in the subsequent tabulation.
[0017]
  Claims of the invention5The security audit device according to the aspect of the present invention is configured so that the question determination unit answers a question that is determined not to be displayed based on the answer associated with the question in the question execution standard information that is the basis of the determination. If the answer to this question is changed and input is changed, the changed input is displayed. If there is no changed input, the changed answer is displayed. Is stored in the answer storage unit.
[0018]
If the security auditing apparatus is configured as described above, the question that is determined not to be displayed is displayed, but can be displayed with an answer based on the question execution standard information.
As a result, it is possible to prevent the auditee from making an answer that is inconsistent with other answers, and at the same time, to check whether the auditee is making an incorrect answer.
[0019]
  Claims of the invention6The security audit method described isAn answer storage unit that stores the input answer, a question, and the answer to one question have a pattern that contradicts the correspondence between other questions and answers for each question. It has a question storage unit that stores the question execution criteria information that holds the criteria for determining whether or not to execute a predetermined question based on it, displays questions with answer options, and conducts security audits based on the answers entered for these questions A security audit method using a security audit device to support, based on an inputted answer and the contradictory answer information, the inputted answer for all the answers stored in the answer storage unit, and Search for conflicting answers, and if there are conflicting answers, output a message indicating that there are conflicting answers, and if necessary, input the above The question is displayed in order to re-input the answer corresponding to the answer, and each time the answer is entered, the question is implemented based on the entered answer and the question corresponding to the entered answer. The reference information is searched, and the determination as to whether or not execution is possible for each unanswered question is stored for each question in the question storage unit, and an execution point is assigned to each question according to this determination as to whether the question is possible Stored in the storage unit, and for subsequent questions, the question is displayed only when the execution point meets a predetermined standardThere is a way.
[0020]
If the security audit method is such a method, it is possible to confirm in real time whether there are any contradictory answers to the question, and the burden on the security auditer is reduced. It is possible to guarantee the legitimacy of
Also, if there are contradictions in the answers, the auditee himself / herself can make another reply after presenting the auditee to the auditee for caution.
[0022]
  Also,If the security audit method is such a method, the next question to be displayed can be automatically narrowed down every time an answer is input.
  For this reason, it is not necessary to carry out all of the series of questions, and it becomes possible to reduce the burden of auditing by both the auditing person and the auditee.
  The security audit method according to claim 7 of the present invention assigns a value corresponding to the degree of importance for each question as the execution point in accordance with the feasibility determination obtained for each unanswered question. This is a method of displaying the question only when the execution point meets a predetermined standard for the subsequent question stored in the storage unit.
  In the security audit method according to claim 8 of the present invention, an answer storage unit for storing an inputted answer and a pattern in which an answer to a question and one answer is inconsistent with a correspondence relation between another question and an answer for each question A question storage section for storing question execution criteria information that holds the criteria for determining whether or not to execute a predetermined question based on the correspondence relationship between the contradictory answer information held and the question and the answer. A security auditing method using a security auditing device that supports security auditing based on an answer input to a question, and stored in the answer storage unit based on the input answer and the contradictory answer information Search for answers that are inconsistent with the entered answers for all answers, and if there are inconsistent answers, indicate that there is an inconsistent answer Output a message and, if necessary, display the question to re-enter the answer for the question corresponding to the entered answer, and each time the answer is entered, the entered answer and this input Based on the question corresponding to the answered answer, the question execution standard information is searched, and the feasibility judgment obtained for each unanswered question is stored for each question in the question storage unit. Accordingly, an implementation flag is set for each question and stored in the question storage unit, and the subsequent questions are selectively displayed based on the implementation flag.
[0023]
In the security audit method according to claim 9 of the present invention, for a question that is determined not to be displayed, an answer to the question is made based on the answer associated with the question in the question execution standard information that is the basis of this determination. If the answer to this question is changed and input is changed, the changed input is displayed. If there is no changed input, the changed answer is displayed. Is stored in the answer storage unit.
[0024]
If the security audit method is used in this way, it is possible to display questions that are determined not to be displayed with answers based on the question execution standard information, and the inspectee has mistakenly contradicted other answers. While preventing answering, it is also possible to check that the answer is incorrect.
[0025]
  The security audit program according to claim 10 of the present invention provides, for each question, a pattern in which an answer storage unit for storing an inputted answer and a question and a response to one question contradict the correspondence between other questions and the answer. Conflict response information held, Question execution standard information that holds criteria for determining whether or not a given question can be executed based on the correspondence between the question and the answerA security audit program comprising a question storage unit for storing a question, displaying a question having an answer option, and performing security audit support based on an answer input to the question, Based on the input answer and the contradictory answer information, for all answers stored in the answer storage unit, search for an answer that contradicts the input answer, and there is an inconsistent answer, Output a message indicating that conflicting answers existLetIf necessary, display the question to re-enter the answer for the question corresponding to the entered answerEach time an answer is input, the question execution standard information is searched based on the input answer and the question corresponding to the input answer, and the execution propriety obtained for each unanswered question A determination is stored for each question in the question storage unit, and an execution point is assigned to each question and stored in the question storage unit according to the determination as to whether or not the execution is possible. Display the question only if it meets the criteriaAs a configuration.
[0026]
This configuration of the security audit program allows the security audit device to search in real time for inconsistent answers to questions, reducing the burden on the security auditer. At the same time, it is possible to guarantee the correctness of the answer.
In addition, when there is a contradiction in the answer, it is possible to receive an answer again from the auditee himself / herself after prompting the auditee to show that the contradiction is inconsistent.
[0028]
  Also,By configuring the security audit program in this way, the security audit device can automatically narrow down the next question to be displayed each time an answer is entered, so there is no need to carry out a series of questions. It is possible to reduce the burden of auditing by both the auditor and the auditee.
  The security audit program according to claim 11 of the present invention provides the security audit apparatus with a value corresponding to the importance level for each question as the execution point in accordance with the execution feasibility determination obtained for each unanswered question. And stored in the question storage unit, and the subsequent question is displayed only when the execution point satisfies a predetermined standard.
  The security audit program according to claim 12 of the present invention provides, for each question, a pattern in which an answer storage unit for storing an inputted answer and a question, a reply to one question is inconsistent with the correspondence between another question and the answer. A security auditing device having a question storage unit for storing question execution standard information that holds judgment information on whether or not to carry out a predetermined question based on the correspondence relationship between the contradictory answer information and the question and the answer is provided. A security audit program for displaying and executing security audit support based on an answer input for the question, and stored in the answer storage unit based on the input answer and the contradictory answer information Search for answers that contradict the entered answer, and if there are contradictory answers, When necessary, the message is displayed so that the answer corresponding to the input answer is re-inputted, and the answer is input each time the answer is input. Based on the answer and the question corresponding to the inputted answer, the question execution standard information is searched, and the execution feasibility judgment obtained for each unanswered question is stored for each question in the question storage unit. In response to this determination as to whether or not to execute, a flag is set for each question to be stored in the question storage unit, and the subsequent question is selectively displayed based on the flag for whether or not to execute. is there.
[0029]
  Claims of the invention13According to the security audit program described above, for the question that is determined not to be displayed on the security audit device, an answer to the question is made based on the answer that is associated with the question in the question execution standard information that is the basis of the determination. If there is a change input of an answer to this question, the changed input is displayed, and if there is no change input, the determined answer is displayed. Is stored in the answer storage unit.
[0030]
By configuring the security audit program in this way, it is possible to display questions that are determined not to be displayed on the security auditing device with answers based on the question execution standard information. This makes it possible to check whether the wrong answer is being made at the same time as preventing the answer from contradicting the answer.
[0031]
DETAILED DESCRIPTION OF THE INVENTION
Embodiments of the present invention will be described below with reference to the drawings.
[First embodiment]
First, the configuration of the first embodiment of the present invention will be described with reference to FIG. FIG. 2 is a block diagram showing the configuration of the security audit apparatus according to this embodiment.
[0032]
As shown in FIG. 1, the security auditing apparatus 10 according to the present embodiment includes an answer storage unit 11, a question storage unit 12, an answer determination unit 13, a question determination unit 14, an input unit 15, and a display unit 16.
The answer storage unit 11 and the question storage unit 12 are held in the auxiliary storage device A. The auxiliary storage device A is composed of a hard disk or the like, and can be an internal storage device of the security audit device 10 or an external storage device.
[0033]
The answer storage unit 11 inputs an answer from the input unit 15 via the answer determination unit 13 and stores it.
The question storage unit 12 stores a question to be output and displayed on the display unit 16. In addition, an inconsistent answer list is stored in which an answer to a certain question has a pattern inconsistent with the correspondence between other questions and the answer for each question. Of course, since a question that does not cause a contradiction is assumed, a contradiction pattern is not always stored for all questions.
Further, the question storage unit 12 stores a question execution reference list for determining whether or not a predetermined question can be executed based on the correspondence between the question and the answer.
[0034]
The answer determination unit 13 and the question determination unit 14 are held in the data processing apparatus B. The data processing device B is configured by a CPU or the like that operates under program control.
The answer determination unit 13 inputs all of the answers stored in the answer storage unit 11 based on the answer input from the input unit 15 and the contradictory answer list held in the question storage unit 12. Search for answers that conflict with the answers.
If a contradictory answer is found, a message indicating that a contradictory answer exists is displayed. If necessary, a screen for inputting an answer again is displayed in response to a request input. Of course, when an inconsistent answer is found, a screen for inputting the answer again can be displayed without requiring a request input.
[0035]
Each time the question determination unit 14 inputs an answer from the answer storage unit 11, the question determination unit 14 determines how the input answer is related to other unanswered questions, and the next question to be displayed. To decide.
At this time, the question determination unit 14 searches the question execution standard list based on the input answer and the question corresponding to the answer, and determines whether or not the execution is possible for each unanswered question. 12 for each question.
Then, the subsequent questions are selectively displayed based on the determination as to whether or not the implementation is possible.
The input unit 15 is a device such as a keyboard and a mouse for inputting an answer to the question.
The display unit 16 is a device such as a display for displaying questions and the like.
[0036]
Next, a processing procedure in the security auditing apparatus according to the present embodiment will be described with reference to FIGS. FIG. 2 is a flowchart showing a question display processing procedure in the security auditing apparatus of the present embodiment.
First, the question determination unit 14 displays a question on the display unit 16 (step 10), and an answer to this question is input from the input unit 15 to the answer determination unit 13 (step 11).
The answer determination unit 13 searches all the answers (answers 1 to N-1) inputted so far for whether or not the inputted answer is consistent with answers to other questions (step 12).
Data serving as a reference for whether the answers contradict each other is stored in the question storage unit 12 together with the question text. For example, inconsistent answers to the question X can be stored in a contradictory answer list in the form “when answer Z is selected for the question Y”.
[0037]
When the answer determination unit 13 finds a contradictory answer, the answer determination unit 13 extracts the question making the contradictory answer and the answer from the question storage unit 12 and the answer storage unit 11, respectively. A message is displayed, prompting you to reply again if necessary.
When the answer is made again (Yes in step 13), the processes in steps 10 to 13 are repeated again.
[0038]
  When the answer is not made again and when there is no conflicting answer (No in Step 13), this answer is continuously supplied to the question determination unit 14. Question judgmentPart 14 investigates which question needs to be implemented (or which question does not need to be implemented) among the questions after question N + 1 based on the answer N of question N.
  At this time, data serving as a criterion for determining whether or not the question can be executed is stored in the question storage unit 12 together with the question data. For example, the status of whether or not to implement question X is “implemented if answer Z is selected for question Y” or “not implemented if answer Z is selected for question Y”. It can be saved as a question execution standard list in a format.
[0039]
The question determination unit 14 determines whether or not to implement all unanswered questions based on these question execution standards, and gives +1 point when executing each question and -1 point when not executing it. Then, each question is stored in the question storage unit 12 (step 14).
And when it becomes the order which asks the question, when the execution point is zero or more, the question is displayed.
That is, the question determination unit 14 searches for the next question (step 15), and when the next question exists (Yes in step 16), confirms whether the execution point of the question is 0 or more. If it is 0 or more (Yes in step 17), the question is displayed (step 18), and the process from step 11 is repeated in order to execute the same process in response to the input of the answer.
[0040]
If the execution point is smaller than 0 (No in step 17), the question is not displayed, but the next question is searched and the same processing is executed, so the processing from step 15 is repeated.
Furthermore, when there is no next question in Step 16 (No in Step 16), the process is terminated. Further, in the setting of the execution point in step 14, when there are no questions after N + 1, the processing can be ended.
[0041]
Next, a processing procedure in the security auditing apparatus according to the present embodiment will be described using a specific example shown in FIG. FIG. 3 is a diagram showing a question list, an answer list, a contradictory answer list, and a question execution standard list in the system.
Here, let us consider a case where the question for the security audit shown in D1 of FIG.
First, the contradiction extraction process performed by the answer determination unit 13 will be described. It is assumed that the contradictory answer list of answers to the questions is set as D3 in FIG.
[0042]
First, the question determination unit 14 displays the question (1) of D1 in FIG. On the other hand, it is assumed that the auditee inputs the answer “A. is” as shown in (1) of the answer list D2 of FIG.
At this point, since this is the first question, the answer determination unit 13 inputs the answer from the input unit 15 and outputs the answer to the question determination unit 14 without performing anything. Details of the processing of the question determination unit 14 will be described later. In this case, the question determination unit 14 displays the next question (2) indicated by D1 in FIG. On the other hand, it is assumed that the auditee inputs an answer “B. Not managed” by the input unit 15 as indicated by (2) in D2 of FIG.
[0043]
On the other hand, the answer determination unit 13 inputs this answer from the input unit 15 and inspects all of the answer contents so far based on the contradiction answer list D3 in FIG.
In this case, the answer determination unit 13 determines that the answer corresponds to (a) in the contradiction answer list D3.
[0044]
Although the contradictory answer list data is expressed in text for ease of understanding, it goes without saying that in actual processing, these text can be expressed as appropriate with codes, numbers, flags, etc. . For example, regarding (a) in the contradictory answer list D3, the data structure can be expressed as “question (1), A, question (2), B”, etc. and held in the question storage unit 12. The same applies to other lists.
Then, for example, based on the input answer, the answer determination unit 13 searches the contradictory answer list using “question (2), B” as a search key, and hits “question (1), A, question (2)”. , B ”is extracted,“ Question (1), A ”is extracted, the answer storage unit 11 is searched based on this, and“ Question (1), A ”is registered in the answer storage unit 11. It can be confirmed that the answer is a contradictory answer.
[0045]
The answer storage unit 11 displays a message such as a character or mark to indicate that the answers are inconsistent, and informs the auditee that the answer is inconsistent, and requests from the auditee, for example, The question (1) or the question (2) is displayed again on the basis of pressing of the re-answer button or the like.
In addition, the answer storage unit 11 can display the message (1) or the question (2) again without waiting for a request from the auditee and display the message. At this time, in addition to displaying all the questions of contradictory answers, it may be limited to display only the question (question (2) in this case) for the answer for which the contradictory answer is input.
[0046]
When the answer is re-input, the answer storage unit 11 updates the answer to the answer storage unit 11 and performs a display process for the next question (3).
If the answer is not re-input and the process is continued with the answer as it is, the display process of the next question (3) is performed based on the continuation request from the auditee.
[0047]
Next, the question execution determination process performed by the question determination unit 14 will be described. It is assumed that the data used as the reference for the question execution determination is set as in the question execution reference list shown as D4 in FIG.
The question determination unit 14 displays the question (3) in the question list D1 in FIG. 3, and the inspectee inputs the answer (3) “B. Not created” in the answer list D2 in FIG. Then, the answer is input to the question determination unit 14 through the contradiction extraction process by the answer determination unit 13 described above.
[0048]
The question determination unit 14 checks the question execution criteria for all unanswered questions based on the question execution criteria list D4 in FIG. 3 and the input answers.
In this case, in the question execution standard list, as the execution standard of question (4) and question (5), “If you answered that B. is not prepared for question (3), the question will not be conducted”. Therefore, 1 point is subtracted from the execution reference point of question (4) and question (5) to obtain -1 point.
As a result, the question (4) and the question (5) become minus points, and are excluded from the questions to be displayed, and these questions are not displayed.
[0049]
As in the case of the contradictory answer list, the data of the question execution standard list is, for example, “question (4), question (3), B, f (not implemented)” as the implementation standard of question (4). It can be made to give.
Then, for example, the question execution standard list is searched based on the answer input to the question determination unit 14 and the question (question (3), B), and the “question (4), question (3), B, It is possible to obtain “f (not implemented)” from “f (not implemented)” and subtract one point from the question (4) in the question storage unit 12.
[0050]
Next, the implementation point setting process will be described in more detail.
<Pattern 1>
First, a description will be given of “a case where points to be implemented are not given to questions that do not meet the criteria set as not implemented”.
Assume that the following conditions exist as answer options, question implementation criteria list, and answers for the question list.
[0051]
[Question list answer choices]
Question (1) A, B
Question (2) A, B
Question (3) A, B
Question (4) A, B
Question (5) A, B
Question (6) A, B
[0052]
[Question Implementation Criteria List]
Since question (1) is the first question, it is not subject to the question implementation decision
For questions (2)-(5), there is no registration of implementation standards

[0053]
[Answer]
Answer to question (1) A (corresponds to the implementation standard of question (6) (not implemented))
Answer to question (2) A (corresponds to the implementation standard of question (6) (not implemented))
Answer B to question (3) (does not meet (implement) the implementation criteria for question (6))
Answer to Question (4) B (None of the implementation standards for Question (6) (Implement))
Answer to question (5) B (corresponds to the implementation standard of question (6) (implement))
Answer to question (6) Unanswered (question that is the subject of the question implementation decision)
[0054]
At this time, it corresponds to the criteria registered in the question execution criteria list, and when it is set to “not implement”, −1 is assigned as an implementation point, and when it is set to “execute”, +1 is assigned as an implementation point. Assuming that no action points are assigned, if no action is taken, the execution points of each question are calculated as follows. For convenience, the initial value of the execution point is set to 0, and when the execution point is not assigned, 0 is added. This is the same in the following description of the pattern.
[0055]
[Implementation points for each question]
Implementation points for question (1) 0
Implementation points for question (2) 0
Implementation points for question (3) 0
Implementation points for question (4) 0
Implementation points for question (5) 0
Implementation point of question (6) -1-1 + 0 + 0 + 1 = -1
[0056]
Therefore, the question (6) corresponds to the question execution criteria list in the question execution determination process for the questions (1), (2), and (5), the execution points are given, and the question (6) is asked. Since the execution point is -1 when it becomes the order to perform, the display is not performed and the question is not performed.
In the above question implementation criteria list, “Implement” is set as the implementation criteria based on the answer to question (5), but only “No” is set in the question implementation criteria list. Of course it is possible. The same applies to the subsequent patterns.
[0057]
<Pattern 2>
Next, a description will be given of “a case where points to be implemented are given to questions that do not meet the criteria set as not implemented”.
It is assumed that the answer options, the question execution standard list, and the answers in the question list are the same as those in the pattern 1.
In this case, the setting of execution points for question (6), which is an unanswered question when questions (1), (2), (4), and (5) are executed, is the same as in pattern 1. is there.
[0058]
However, in this pattern, in the setting of the execution point for the question (3), “Do not implement in the case of answer A to question 3” is registered as the execution standard for question (6). When “B” is input as an answer to), a process of assigning an “execute” execution point is executed.
Various specific processing methods can be used. For example, the question execution standard list is searched based on the question (question (3)) corresponding to the answer input to the question determination unit 14. If a question is registered, but an answer ("A") different from the entered answer is registered as an answer corresponding to this question, the answer is registered as an implementation propriety standard corresponding to this question. This can be done by assigning an execution point (+1) opposite to the implementation criterion (“not implemented”).
When the question execution availability determination process is performed in this way, the execution points for each question are as follows.
[0059]
[Implementation points for each question]
Implementation points for question (1) 0
Implementation points for question (2) 0
Implementation points for question (3) 0
Implementation points for question (4) 0
Implementation points for question (5) 0
Implementation point of question (6) -1-1 + 1 + 0 + 1 = 0
[0060]
Therefore, the question (6) corresponds to the question execution standard list in the question execution determination process for the questions (1), (2), and (5), and the question (6) in the question execution determination process for the question (3). Although it does not correspond to the implementation criteria list, when the execution point is given, the execution point becomes 0 when the question (6) is ordered, and the question is displayed and executed. Become.
[0061]
<Pattern 3>
Next, a description will be given of “a case in which a point that does not meet the criteria set as not to be implemented, including a case where the implementation criteria for the question is not registered” is given.
It is assumed that the answer options, the question execution standard list, and the answers in the question list are the same as those in the pattern 1.
[0062]
In this case, since the question (1) is the first question, it is not subject to the determination of whether or not the question can be executed, and the questions execution criteria are not registered in the question execution criteria list for the questions (2) to (5). For this reason, all the determinations as to whether or not an unanswered question is made each time each question is executed are determined to be “execute”, and +1 is assigned as an execution point.
In addition, for Question (6), the implementation decision at the time of the execution of Question (1) and Question (2) is “Not implemented”, and all other questions are judged as “Implemented”. , Each will be given points.
As a result, the execution points of each question are as follows, and the question (6) is executed.
[0063]
[Implementation points for each question]
Implementation points for question (1) 0
Implementation point for question (2) +1
Implementation points for question (3) + 1 + 1 = + 2
Implementation point for question (4) + 1 + 1 + 1 = + 3
Implementation point for question (5) + 1 + 1 + 1 + 1 = + 4
Implementation point of question (6) -1-1 + 1 + 1 + 1 = + 1
[0064]
The execution point setting process in this embodiment and the question execution availability determination process based on this execution point are not limited to those described above, and the execution point determination control of the question is controlled using the execution point. It can be various within the range of possible.
In this embodiment, the auditee inputs the answers to the questions, but it is of course possible for the auditor to ask the auditee and enter the answers by the auditor. It is.
Furthermore, a different value can be set for each question as an execution point to be given. For example, in the question execution standard list of the question storage unit 12, the execution points to be given for each execution standard are held, and when it is determined that “do not execute” a predetermined question based on this, −5 points It can also be given. This makes it possible to finely adjust the questions to be implemented according to the importance of the questions.
[0065]
As described above, according to the security auditing apparatus of this embodiment, by automatically listing and registering inconsistencies in answers between questions in advance, this list is automatically searched each time an answer is entered. In addition, it is possible to confirm in real time whether there are any contradictory answers to the question.
For this reason, it is possible to reduce the burden on the security auditor and to ensure the correctness of the answer.
Further, when there are contradictions in the answers, the auditee himself / herself can make a reply again after notifying the auditee of the contradictions and calling attention.
[0066]
In addition, by registering the relevance between questions as a question execution standard list in advance, it is possible to automatically narrow down the next question to be displayed every time an answer is entered, and it is necessary to carry out a series of questions. As a result, it is possible to alleviate the burden of auditing by both the auditing person and the auditee.
In addition, it is possible to determine whether or not an unanswered question can be executed for each answer based on the question execution criteria list, and the determination result can be stored as an execution point. Based on the execution point, it is possible to determine whether to actually display the question.
[0067]
[Second Embodiment]
Next, a second embodiment of the present invention will be described with reference to FIG. FIG. 5 is a flowchart showing a question display processing procedure in the security auditing apparatus of the present embodiment.
The present embodiment is the first embodiment in that, for a question that is determined not to be implemented, an answer is determined based on the question execution standard list, and this answer is set and displayed in a state that can be changed and input to the question. And different. About another point, it is the same as that of 1st embodiment, The thing similar to FIG. 1 can also be used for the block diagram of this embodiment. However, in this embodiment, the question determination unit 14 may register the answer after the change input in the answer storage unit 11.
[0068]
First, the operation (step 30 to step 36) from the operation for displaying the question to the security auditing apparatus 10 until it is determined whether or not there is the next question is the same as the operation (step 10 to step 16) in the first embodiment. It is the same.
Further, in the step 37, when the execution point is 0 or more (Yes in the step 37), the next question is displayed (step 38), and the operation is repeated from the input of the answer to the question. This is the same as the operation (Yes in Step 17, Step 18).
Next, when the execution point is smaller than 0 (No in step 37), the question determination unit 14 determines an answer to the question based on the question execution reference list, sets this answer, and sets the next question. Is displayed on the display unit 16 (step 39).
[0069]
For example, when the answer determination process corresponds to (a) in the question execution standard list D4 in FIG. 3, "B. Not done" can be automatically set as the answer to the question (4). .
That is, since D4 (a) is registered as “B. If you answered that you have not created question (3), you will not be asked a question”, it will be the same for question (4). Similarly to the answer to the question (3), “B. not done” as a negative answer can be selected and determined.
[0070]
The auditee can confirm the answer and register it as it is for the question and answer displayed in this way. At this time, based on the registration request input from the input unit 15 by the auditee, the question determination unit 14 stores the answer in the answer storage unit 11.
Further, even when the displayed answer is changed by the auditee, the question answering unit is also used to change the changed answer based on the registration request input from the input unit 15 by the auditee. 14 stores the answer in the answer storage unit 11. And the question judgment part 14 repeats the process from step 35, in order to search the next question and to perform the same process (step 40).
In step 39 of the present embodiment, after the answer is determined, the set answer is displayed and the necessary change input (step 40) by the auditee is not possible, but the determined answer is displayed. It is also possible to simulate the answer input by the auditee and store it in the answer storage unit 11 as it is.
[0071]
As described above, according to the security auditing apparatus of the present embodiment, for a question registered in the question execution standard list as not to be executed when a predetermined answer is input to a predetermined question, The question can be displayed with an answer based on the question execution standard list.
For this reason, it is possible to prevent the auditee from mistakenly making an answer that is inconsistent with other answers, and it is also possible to check whether an incorrect answer has been made.
[0072]
Moreover, it is also possible to store such an answer in the answer storage unit 11 based on the question execution standard list, assuming that such a question is not displayed with an answer but is implemented.
As a result, it is possible not only to omit the execution of the question, but also to determine the answer result as having been executed and reflect it in the subsequent tabulation.
[0073]
[Third embodiment]
Next, a third embodiment of the present invention will be described with reference to FIG. FIG. 5 is a flowchart showing a question display processing procedure in the security auditing apparatus of the present embodiment.
This embodiment is different from the first embodiment in that the determination of whether or not a question can be performed is not controlled using an execution point, but is controlled using an execution flag. About another point, it is the same as that of 1st embodiment, The thing similar to FIG. 1 can also be used for the block diagram of this embodiment.
[0074]
First, with respect to the operation (step 50 to step 53) from the operation of displaying a question on the security auditing apparatus 10 to the determination of whether or not to perform the response again when there is a contradiction in the response (the operation in the first embodiment ( The same as step 10 to step 13).
Next, in the present embodiment, the question determination unit 14 sets an execution propriety flag for the (N + 1) th and subsequent questions based on the input answer and the question execution reference list (step 54).
[0075]
In setting the execution feasibility flag, for example, a flag indicating “execute” is set as an initial value in the question storage unit 12 for each question, and the question that is determined not to be implemented in the above implementation feasibility determination The flag may be updated to “do not implement”.
In addition, when it is determined next to “execute” for this question, the flag is updated to “execute” and the final determination of whether or not to execute is applied. In addition, it is possible to prevent the subsequent update from being accepted by preferentially applying the “not implemented” registered in advance.
In addition, it is also possible to have a priority order for setting the execution enable / disable flag for each execution reference in the question execution reference list, and to update the execution enable / disable flag based on this priority order.
[0076]
The subsequent operations (steps 55 to 58) are the same as the operations in the first embodiment (steps 15 to 18). However, in the implementation determination in step 57 of this embodiment, the implementation availability flag is “ It is performed based on whether “Implement” or “Not implement”.
[0077]
As described above, according to the security audit device of the present embodiment, for each answer, it is determined whether or not an unanswered question can be executed based on the question execution reference list, and the determination result is stored as an executable flag. It is possible to control the display / non-display of the question according to the execution flag when the order in which each question is executed is reached.
[0078]
Extraction of contradictions in the above embodiment, determination of whether or not to execute a question, and the like are executed by a security audit program.
This security audit program sends a command to each component of the computer to perform predetermined processing such as inconsistency extraction processing or question execution availability determination processing.
Thus, these processes are realized by a security audit apparatus in which a security audit program and a computer cooperate.
[0079]
The security audit program can be stored in a computer ROM or hard disk, or can be stored in a computer-readable recording medium such as an external storage device and a portable recording medium.
An external storage device refers to a storage expansion device that incorporates a recording medium such as a magnetic disk and is externally connected to a security audit device or the like. On the other hand, the portable recording medium is a recording medium that can be mounted on a recording medium driving device (drive device) and can be carried, for example, a CD-ROM, a flexible disk, a memory card, a magneto-optical disk, and the like. .
[0080]
The program recorded on the recording medium is loaded into the RAM of the computer and executed by the CPU. By this execution, the function of the security audit apparatus of the present embodiment described above is realized.
Further, when the security audit program is loaded by the computer, the security audit program held by another computer can be downloaded to its own RAM or external storage device using a communication line.
The downloaded security audit program is also executed by the CPU, and realizes the contradiction extraction process, the question execution availability determination process, and the like of the present embodiment.
[0081]
In addition, this invention is not limited to the above embodiment, It cannot be overemphasized that a various change implementation is possible within the scope of the present invention.
For example, it is possible to combine the security audit apparatuses in the above embodiments. In other words, combining the second and third embodiments, it is possible to display a question with an answer for a question that is determined not to be executed based on the question execution criteria list by using an implementation flag. It is.
In addition, the functions of the answer determination unit 13 and the question determination unit 14 and the data stored in the answer storage unit 11 and the question storage unit 12 are changed within a range in which the above-described functions of the present invention are realized. It can be changed as appropriate.
[0082]
【The invention's effect】
As described above, according to the present invention, by listing up and registering inconsistencies in answers between questions in advance, this list is automatically searched each time an answer is input, and contradictions are found in the questions. It is possible to confirm in real time whether there is no answer.
For this reason, it is possible to reduce the burden on the security auditor and to ensure the correctness of the answer.
Also, if there are contradictions in the answers, the auditee himself / herself can make another reply after presenting the auditee to the auditee for caution.
[0083]
In addition, by registering the relevance of questions as an implementation criteria list in advance, the questions to be displayed next can be automatically narrowed every time an answer is entered, eliminating the need to execute a series of questions. As a result, it is possible to reduce the burden of auditing by both the audit performer and the auditee.
In addition, it is possible to determine whether or not an unanswered question can be executed for each answer based on the question execution reference list, and store the determination result as an execution point or an execution enable / disable flag. It is possible to determine whether or not to actually display the question based on the execution point and the execution propriety flag.
[0084]
In addition, for questions that are registered in the question execution criteria list as not to be implemented when a given answer is entered for a given question, that question is displayed with an answer based on the question execution criteria list Can do.
For this reason, it is possible to prevent the auditee from mistakenly making an answer that is inconsistent with other answers, and it is also possible to check whether an incorrect answer has been made.
[0085]
Moreover, it is also possible to store such an answer in the answer storage unit based on the question execution standard list, assuming that such a question is not displayed with an answer but is implemented.
As a result, it is possible not only to omit the execution of the question, but also to determine the answer result as having been executed and reflect it in the subsequent tabulation.
[0086]
In this way, in addition to checking the contradiction of answers, only those that require questions are displayed, or for certain questions, they are displayed with answers, or automatic registration of answers, so that security audits are performed. The burden of time and personnel is reduced, and time can be spent on answers and other matters necessary for auditing, so that the accuracy of audit results can be improved.
[0087]
In addition, the security audit program can realize a function for extracting inconsistencies, a function for determining whether to execute a question, and the like by sending a predetermined command to each component of the computer.
Accordingly, these functions and the like can be realized by a security audit apparatus in which a security audit program and a computer cooperate.
[Brief description of the drawings]
FIG. 1 is a block diagram showing a configuration of a security audit device according to an embodiment of the present invention.
FIG. 2 is a flowchart showing a question display processing procedure in the security auditing apparatus according to the first embodiment of the present invention.
FIG. 3 is a diagram showing a question list, an answer list, a contradiction answer list, and a question execution standard list in the security auditing apparatus according to the first embodiment of the present invention.
FIG. 4 is a flowchart showing a question display processing procedure in the security auditing apparatus according to the second embodiment of the present invention.
FIG. 5 is a flowchart showing a question display processing procedure in the security auditing apparatus according to the third embodiment of the present invention.
[Explanation of symbols]
10 Security audit device
A auxiliary storage device
11 Answer storage
12 question storage
B Data processing device
13 answer judgment department
14 Question Judgment Department
15 Input section
16 Display section

Claims (10)

A security audit device that displays questions with answer options and supports security audits based on the answers entered for the questions,
An answer storage unit for storing inputted answers;
Depending on the answer to the question , the contradictory answer information in which the answer to one question has a pattern that contradicts the correspondence between the other questions and the answer for each question, and the answers to each of a plurality of other questions related to the given question A question storage unit for storing question execution standard information that holds a determination criterion for determining whether or not the predetermined question can be performed for each of the plurality of other questions ;
Based on the input answer and the contradictory answer information, search for an answer that contradicts the input answer for all the answers stored in the answer storage unit, and there is an inconsistent answer, An answer determination unit that outputs a message indicating that there are conflicting answers, and displays the question in order to re-enter the answer for the question corresponding to the input answer, if necessary;
Each time the answer is inputted, the input has been answered, on the basis of the questionnaire corresponding to the inputted answers, searches the question exemplary reference information, the implementation permission determination obtained for each question unanswered Is stored for each question in the question storage unit, and a question determination unit that selectively displays subsequent questions based on the determination of whether or not to implement,
Have
The question determination unit
Wherein in response to the unanswered the implementation capability determination obtained for each question on the basis of the question exemplary reference information, the preset predetermined enforcement points were given to each question, to calculate the sum of the enforcement point A security auditing apparatus that stores the question in the question storage unit and displays the question only for the subsequent questions when the total of the execution points satisfies a predetermined standard. The question determination unit
In accordance with the determination as to whether or not to implement each unanswered question, as the execution point, a value corresponding to the importance is assigned to each question and stored in the question storage unit. The security audit apparatus according to claim 1, wherein the question is displayed only when the execution point satisfies a predetermined standard. The question determination unit
For a question that is determined not to be displayed, an answer to the question that is determined not to be displayed is determined based on the answer that is associated with the question in the question execution standard information that is the basis of the determination. An answer is memorize | stored in the said answer memory | storage part. The security auditing apparatus in any one of Claims 1-2 characterized by the above-mentioned. The question determination unit
For a question that is determined not to be displayed, an answer to the question is determined based on the answer associated with the question in the question execution standard information that is the basis of this determination, and the question with the answer is displayed. And, when there is a change input of an answer to this question, the changed input answer is stored, and when there is no change input, the determined answer is stored in the answer storage unit. The security audit device according to any one of claims 1 to 3 . The answer storage unit that stores the input answer, the question, the answer to one question is related to the contradictory answer information in which each question has a pattern that contradicts the correspondence between other questions and the answer, and the predetermined question A question storing question execution standard information that holds an execution determination criterion as a reference for determining whether or not the predetermined question can be executed for each of the plurality of other questions in response to an answer to each of a plurality of other questions A security audit method using a security auditing device that includes a storage unit, displays a question having answer options, and supports security auditing based on the answer input to the question,
Based on the input answer and the contradictory answer information, search for an answer that contradicts the input answer for all the answers stored in the answer storage unit,
If there are conflicting answers, output a message indicating that there are conflicting answers, and if necessary, display the question to re-enter the answer for the question corresponding to the entered answer,
Each time the answer is inputted, the input has been answered, on the basis of the questionnaire corresponding to the inputted answers, searches the question exemplary reference information, for each question unanswered based on the question Practice Information Is stored for each question in the question storage unit, and predetermined execution points set in advance are assigned for each question in accordance with the determination of whether or not to execute, and the total of the execution points is calculated. The question is stored in the question storage unit, and the subsequent question is displayed only when the total of the execution points satisfies a predetermined standard. In accordance with the implementation feasibility determination obtained for each unanswered question, as the implementation point, a value corresponding to the importance is assigned to each question and stored in the question storage unit. 6. The security audit method according to claim 5 , wherein the question is displayed only when the points satisfy a predetermined standard. For a question that is determined not to be displayed, an answer to the question is determined based on the answer associated with the question in the question execution standard information that is the basis of this determination, and the question with the answer is displayed. And, when there is a change input of an answer to this question, the changed input answer is stored, and when there is no change input, the determined answer is stored in the answer storage unit. The security audit method according to any one of claims 5 to 6 . The answer storage unit that stores the input answer, the question, the answer to one question is related to the contradictory answer information in which each question has a pattern that contradicts the correspondence between other questions and the answer, and the predetermined question A question storing question execution standard information that holds an execution determination criterion as a reference for determining whether or not the predetermined question can be executed for each of the plurality of other questions in response to an answer to each of a plurality of other questions A security audit program comprising a storage unit and displaying a question having answer options, and performing security audit support based on the answer input to the question,
Based on the input answer and the contradictory answer information, for all the answers stored in the answer storage unit, search for an answer that contradicts the input answer,
If there are conflicting answers, a message indicating that there is a conflicting answer is output, and if necessary, the question is displayed to re-enter the answer for the question corresponding to the input answer,
Each time the answer is inputted, the input has been answered, on the basis of the questionnaire corresponding to the inputted answers, to search the question exemplary reference information, for each question unanswered based on the question Practice Information Is stored for each question in the question storage unit, and predetermined execution points set in advance are assigned to each question in accordance with the determination of whether or not to execute, and the total of the execution points is calculated. and it is stored in the question storage unit, the following questions, the sum of the exemplary point only if it meets a predetermined criteria, the security audit program for executing possible to display the question. In the security audit device,
In accordance with the determination as to whether or not to implement each unanswered question, as the execution point, a value corresponding to the degree of importance is assigned to each question and stored in the question storage unit. The security audit program according to claim 8 , wherein the question is displayed only when the points satisfy a predetermined standard. In the security audit device,
For a question that is determined not to be displayed, the answer to the question is determined based on the answer associated with the question in the question execution standard information that is the basis of this determination, and the question with the answer is displayed. And when there is a change input of an answer to this question, the answer that has been input is changed, and when there is no change input, the determined answer is stored in the answer storage unit A security audit program according to any one of claims 8 to 9 .

Images