Display device, display method, and program

Abstract

To enable the problem part of a cyber security state in an organization to be grasped easily.SOLUTION: A display device according to the present disclosure comprises: specification means for specifying an organization unit name that manages each network asset included in the cyber security risks to be evaluated, and identification information of each network asset; evaluation acquisition means for acquiring a third party evaluation value for each organization on the basis of information specifying the organization unit name and identification information of each network asset; and display means that displays the third party evaluation value for each organization.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present disclosure relates to a display device, a display method, and a program. [Background technology]

[0002] The status of cybersecurity measures in an organization may be evaluated by a third party and the results may be used.

[0003] For example, Patent Document 1 discloses a technique for generating evaluation information on the security aspect of a website to be evaluated, using information on the security state of the website to be evaluated, obtained from an information providing site. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2013-041372 A Summary of the Invention [Problem to be solved by the invention]

[0005] By the way, even if you can understand the results of the cybersecurity risk assessment for the entire organization, it is not possible to identify where in the organization there are problems with the cybersecurity situation.

[0006] One example of the purpose of the present disclosure is to make it easy to understand problem areas in the cybersecurity situation within an organization. [Means for solving the problem]

[0007] A display device in one aspect of the present disclosure includes an identification means for identifying the name of the organizational unit that manages each network asset included in a cybersecurity risk assessment target and identification information for each network asset, an evaluation acquisition means for acquiring a third-party evaluation value for each organization based on the identified organizational unit name and identification information for each network asset, and a display means for displaying the third-party evaluation value for each organization.

[0008] A display method in one aspect of the present disclosure involves a computer identifying the name of the organizational unit that manages each network asset included in a cybersecurity risk assessment target and identification information for each network asset, obtaining a third-party evaluation value for each organization based on the information identifying the organizational unit name and identification information for each network asset, and displaying the third-party evaluation value for each organization.

[0009] A program in one aspect of the present disclosure causes a computer to identify the name of the organizational unit that manages each network asset included in a cybersecurity risk assessment target and identification information for each network asset, obtain a third-party evaluation value for each organization based on the information identifying the organizational unit name and identification information for each network asset, and display the third-party evaluation value for each organization. Effect of the Invention

[0010] One example of an effect of the present disclosure is that it is possible to provide a display device or the like that allows users to easily grasp problematic areas of the cybersecurity situation within an organization. [Brief description of the drawings]

[0011] [Figure 1] FIG. 1 is a functional block diagram showing an example of a configuration of a display device according to the present disclosure. [Diagram 2] FIG. 2 is a diagram showing a hardware configuration in which the display device according to the present disclosure is realized by a computer device and its peripheral devices. [Diagram 3] FIG. 3 is an example of a display screen of the third-party evaluation value for each organization in this disclosure. [Figure 4]FIG. 4 is a flowchart showing the operation of the display device according to the present disclosure. [Diagram 5] FIG. 5 is an example of a display screen showing the difference in third-party evaluation value from a predetermined period ago for each organization in this disclosure. [Figure 6] FIG. 6 is a functional block diagram showing an example of a configuration of a display device according to the present disclosure. [Figure 7] FIG. 7 is an example of a display screen showing the status of response to cybersecurity risks in this disclosure. [Figure 8] FIG. 8 is a flowchart showing the operation of the display device according to the present disclosure. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0012] Hereinafter, with reference to the drawings, embodiments of a display device, a display method, a program, and a non-transitory recording medium for recording a program according to the present disclosure will be described in detail. The present embodiment does not limit the disclosed technology.

[0013] [First embodiment] 1 is a functional block diagram showing an example of a configuration of a display device 100 according to the present disclosure. Referring to FIG. 1, the display device 100 includes an identifying unit 101, an evaluation acquiring unit 102, and a display unit 103.

[0014] The display device 100 is a device for visualizing a third-party evaluation value of each network asset owned by a company, etc., for each organization in the company that manages each network asset. In the present disclosure, each network asset is associated with the name of the organizational unit that manages the network asset and identification information of the network asset, and is stored in, for example, a storage device 505.

[0015] The organizational unit name is not particularly limited as long as it is a name used when the entire organization is divided into a plurality of groups. For example, the organizational unit name may be the name of an organization assigned to each business unit or business location in a company, a subsidiary of a company, or the name of an organizational unit further subdivided therefrom.

[0016] In this disclosure, network assets refer to the assets of an organization connected to the Internet, and include hardware such as routers, switches, hubs, host computers, servers, and wireless access points, as well as software such as an operating system (OS), applications, and patches.

[0017] Here, we will explain the third-party evaluation value. The third-party evaluation value is a score given to the cybersecurity risk status of the network assets included in the evaluation target based on information that an external organization can obtain via the Internet. The third-party evaluation value is calculated based on whether or not each evaluation item that evaluates the cybersecurity risk status is satisfied, and the evaluation value is adjusted according to the number of network assets.

[0018] Examples of evaluation items for the cybersecurity risk situation include the status of security measures taken in an organization, signs of malware infection, etc. Examples of the security measure situation include whether or not undesirable software is used, whether or not the security settings of network assets comply with best practices, etc. However, the above-mentioned evaluation items are merely examples, and other evaluation items may be used as long as they can evaluate the cybersecurity risk situation.

[0019] Fig. 2 is a diagram showing an example of a hardware configuration in which the display device 100 according to the present disclosure is realized by a computer device 500 including a processor. As shown in Fig. 2, the display device 100 includes a central processing unit (CPU) 501, memories such as a read only memory (ROM) 502 and a random access memory (RAM) 503, a storage device 505 such as a hard disk for storing a program 504, a communication interface 508 for network connection, and an input / output interface 511 for inputting and outputting data.

[0020] The CPU 501 operates an operating system to control the entire display device 100 according to the present disclosure. The CPU 501 also reads out programs and data from a recording medium 506 mounted in, for example, a drive device 507 into a memory. The CPU 501 also functions as the identification unit 101, the evaluation acquisition unit 102, the display unit 103, or a part of these units in the embodiment of the present disclosure, and executes processes or commands in the flowchart shown in FIG. 4, which will be described later, based on the programs.

[0021] The recording medium 506 is, for example, an optical disk, a flexible disk, a magneto-optical disk, an external hard disk, or a semiconductor memory. A recording medium that is a part of the storage device is a non-volatile storage device, and the program is recorded therein. The program may also be downloaded from an external computer (not shown) that is connected to a communication network.

[0022] The input device 509 is realized by, for example, a mouse, a keyboard, built-in key buttons, etc., and is used for input operations. The input device 509 is not limited to a mouse, a keyboard, or built-in key buttons, and may be, for example, a touch panel. The output device 510 is realized by, for example, a display, and is used to check the display.

[0023] As described above, the display device 100 in the present disclosure is realized by the computer hardware shown in FIG. 2. However, the means for realizing each part of the display device 100 in FIG. 1 is not limited to the configuration described above. The display device 100 may be realized by one physically combined device, or may be realized by two or more physically separated devices connected by wire or wirelessly. The display device 100 may further include an output device such as a display, or a device other than the display device 100 may include a display. The display device 100 in the present disclosure may also be configured by cloud computing or the like.

[0024] The identifying unit 101 is a means for identifying the name of the organizational unit that manages each network asset included in the target of cybersecurity risk assessment and the identification information of each network asset. The identification information is not particularly limited as long as it is information that can identify the network asset when the network asset is accessed via the Internet, and is, for example, an IP (Internet Protocol) address or a host name. The identifying unit 101 identifies the name of the organizational unit that manages each network asset and the identification information of each network asset based on information that links the name of the organizational unit that manages each network asset and the identification information of the network asset, stored in the storage device 505 or the like. The identifying unit 101 outputs the information identified in this manner to the evaluation acquisition unit 102.

[0025] The evaluation acquisition unit 102 is a means for acquiring a third-party evaluation value for each organization based on information that specifies the organizational unit name and identification information of each network asset. The evaluation acquisition unit 102 acquires the above-mentioned score by evaluating the network asset managed by each organization.

[0026] More specifically, the evaluation acquisition unit 102 acquires a third-party evaluation value for each organization in the following procedure. That is, first, the evaluation acquisition unit 102 transmits information linking the organizational unit name and identification information of each network asset to an external server of an external evaluation agency. Next, it receives a third-party evaluation value calculated by the external evaluation agency with the network assets managed by each organization as the evaluation target. Information is transmitted and received between the display device 100 and the external server, for example, via an API (Application Programming Interface). When the evaluation acquisition unit 102 acquires the third-party evaluation value for each organization, it outputs the information to the display unit 103.

[0027] The display unit 103 is a means for displaying the third-party evaluation value for each organization. The display unit 103 displays the third-party evaluation value for each organization on the output device 510 or the like. The display unit 103 may also generate a screen showing the third-party evaluation value for each organization and display the generated screen on a device other than the display device 100.

[0028] Fig. 3 is an example of a display screen of a third-party evaluation value for each organization in the present disclosure. However, Fig. 3 is one example of displaying a third-party evaluation value for each organization, and is not limited to the example of Fig. 3. A display screen 10 of the third-party evaluation value in Fig. 3 includes a display area 11 of the third-party evaluation value of the entire organization and a display area 12 of the third-party evaluation value for each organization.

[0029] In FIG. 3, the display area 11 of the third-party evaluation value of the entire organization displays the third-party evaluation value of the entire organization and the third-party evaluation values ​​of the major organizations. In the example of FIG. 3, the organization is a group of companies with capital ties, and the third-party evaluation value of the parent company is displayed as the major organization. In addition, in the example of FIG. 3, the third-party evaluation value of the entire organization and the third-party evaluation value of the parent company are displayed next to each other to show the change from a predetermined period ago (for example, one day ago). Note that, in the display device 100 of the present disclosure, display of the third-party evaluation value of the entire organization is not essential. Also, for the third-party evaluation value of the entire organization, similar to the third-party evaluation value for each organization, the evaluation acquisition unit 102 acquires a third-party evaluation value that evaluates the network assets held by the entire organization, and the display unit 103 displays the acquired third-party evaluation value.

[0030] In Fig. 3, display area 12 of the third-party evaluation value for each organization displays the third-party evaluation values ​​of the network assets managed by each of organizations A to E. In the example of Fig. 3, for example, when compared with the third-party evaluation values ​​of the other organizations, it can be seen that the network asset managed by organization E, which has the lowest third-party evaluation value, at least has a security risk problem.

[0031] The operation of the display device 100 configured as above will be described with reference to the flowchart of FIG.

[0032] 4 is a flowchart showing an outline of the operation of the display device 100 according to the present disclosure. Note that the processing according to this flowchart may be executed based on program control by the above-mentioned processor.

[0033] As shown in FIG. 4, first, the identification unit 101 identifies the name of the organizational unit that manages each network asset included in the cybersecurity risk assessment target and the identification information of each network asset (step S101). Next, the evaluation acquisition unit 102 acquires a third-party evaluation value for each organization based on the information identifying the organizational unit name and identification information of each network asset (step S102). Finally, the display unit 103 displays the third-party evaluation value for each organization (step S103). With this, the display device 100 terminates its operation.

[0034] In the display device 100 according to the present disclosure, the evaluation acquisition unit 102 acquires a third-party evaluation value for each organization based on information that specifies the organizational unit name and identification information of each network asset, and the display unit 103 displays the third-party evaluation value for each organization. Thus, by displaying the third-party evaluation value for each organization, problematic parts of the cybersecurity situation within the organization can be easily grasped.

[0035] [Variation 1] Next, a modified example of the first embodiment will be described in detail with reference to the drawings. Below, the description of the present embodiment will be omitted to the extent that the description of the present embodiment is not unclear. Each component in each embodiment of the present disclosure can be realized not only by hardware but also by a computer device based on program control and software, as in the computer device shown in FIG. 2.

[0036] The evaluation acquisition unit 102 in this modification further acquires a third-party evaluation value for each organization from a predetermined period of time ago. For example, the evaluation acquisition unit 102 stores the third-party evaluation value for each organization from the external server every time it acquires the third-party evaluation value in the storage device 505, and acquires the third-party evaluation value for each organization from the storage device 505 from the storage device 505. The predetermined period is, for example, 1 to 30 days ago, and is the period required to implement measures against the identified cybersecurity risk.

[0037] The display unit 103 in this modification further displays the difference in the third-party evaluation value from a predetermined period ago for each organization. The display unit 103 displays the difference between the third-party evaluation value most recently acquired by the evaluation acquisition unit 102 and the third-party evaluation value from a predetermined period ago. The display unit 103 displays, for example, the difference between the third-party evaluation value most recently acquired and the third-party evaluation value from a predetermined period ago side by side.

[0038] 5 is an example of a display screen in the present disclosure that displays the difference in third-party evaluation value for each organization from a predetermined period ago. A display screen 20 of third-party evaluation value in FIG. 5 includes a display area 21 of the third-party evaluation value of the entire organization and a display area 22 of the third-party evaluation value for each organization. In FIG. 5, the display area 21 of the third-party evaluation value of the entire organization is similar to the display area 11 of the third-party evaluation value of the entire organization in FIG. 3.

[0039] In the display area 22 of the third-party evaluation value for each organization in Fig. 5, the difference in the third-party evaluation value from a predetermined period ago is displayed next to the third-party evaluation value of the network assets managed by each of organizations A to E. In the example of Fig. 5, the difference in the third-party evaluation value from one day ago and 30 days ago is displayed. By displaying such a screen, it is possible to grasp the change in the third-party evaluation value compared to one day ago and 30 days ago.

[0040] In the display device 100 according to the present disclosure, the evaluation acquisition unit 102 acquires a third-party evaluation value for each organization from a predetermined period ago, and the display unit 103 displays the difference between the third-party evaluation value for each organization and the third-party evaluation value from the predetermined period ago. This allows the user to grasp the change in the cybersecurity risk status of each organization.

[0041] [Variation 2] Next, another modified example of the first embodiment will be described in detail with reference to the drawings. In the following, the description of the present embodiment will be omitted to the extent that it is not unclear.

[0042] In this modification, the evaluation acquisition unit 102 acquires a reference value for the third-party evaluation for each organization in addition to the functions of the evaluation acquisition unit 102 in the first embodiment. The reference value is, for example, a target value for the third-party evaluation value set for each organization, but is not limited to this as long as it is a value to be compared to determine whether the third-party evaluation value of each organization is good or bad. The reference value for the third-party evaluation for each organization is stored in, for example, the storage device 505, and the evaluation acquisition unit 102 acquires the reference value for the third-party evaluation for each organization from the storage device 505.

[0043] In addition to the functions of the display unit 103 of the first embodiment, the display unit 103 in this modification displays the third-party evaluation for each organization in a different manner depending on the difference from the reference value. For example, the display unit 103 may display the third-party evaluation in a different color in the display area of ​​the third-party evaluation value or in a different font depending on whether the third-party evaluation value is higher or lower than the reference value. Furthermore, the display unit 103 may display the third-party evaluation in a different manner depending on the degree of difference from the reference value. For example, the display unit 103 may display the third-party evaluation so that it is emphasized when the third-party evaluation value differs from the reference value by 20, rather than when it differs by 10.

[0044] The display device 100 in this modification further acquires a reference value for the third-party evaluation for each organization, and the display unit 103 further displays the third-party evaluation for each organization in a different manner according to the difference from the reference value. This makes it easier to understand the difference from the reference value of the cybersecurity risk status of each organization.

[0045] [Second embodiment] Next, the second embodiment will be described in detail with reference to the drawings. Below, the description of the second embodiment will be omitted to the extent that the description of the present embodiment is not unclear. Each component in each embodiment of the present disclosure can be realized not only by hardware but also by a computer device or software based on program control, as in the computer device shown in FIG. 2.

[0046] In this embodiment, a situation is assumed in which the response status to cybersecurity risks pointed out to each organization is displayed. The cybersecurity risks pointed out to each organization are classified into diagnostic categories such as a third-party evaluation value, cybersecurity issues pointed out by an external organization, disclosure of authentication information on the dark web, etc., exposure of internal documents, etc. on the Internet, and specific vulnerabilities with high urgency. However, these diagnostic categories are only examples of pointed out cybersecurity risks, and other risks may be pointed out.

[0047] 6 is a functional block diagram showing an example of the configuration of a display device according to the present disclosure. Display device 110 will be described with reference to FIG.

[0048] The display device 110 includes an identification unit 111, an evaluation acquisition unit 112, a display unit 113, a response acquisition unit 114, a reception unit 115, and a notification unit 116. The identification unit 111 and the evaluation acquisition unit 112 in the display device 110 have the same configurations and functions as the identification unit 101 and the evaluation acquisition unit 102 in the display device 100, and therefore a description thereof will be omitted here.

[0049] The response acquisition unit 114 is a means for acquiring the status of response to the cybersecurity risks indicated for each organization. For example, the response acquisition unit 114 first transmits the cybersecurity risks indicated for each organization to the person in charge of each organization. The response acquisition unit 114 acquires whether or not the indicated cybersecurity risks have been responded to based on whether or not a response completion signal indicating that the risks have been responded to has been received from the person in charge of each organization.

[0050] In addition to the functions of display unit 103, display unit 113 displays the response status of cybersecurity risks for each organization. Display unit 113, for example, displays a list of the response status of cybersecurity risks for each organization. In this case, display unit 113 displays that the cybersecurity risks for which a response completion signal has been received have been responded to. On the other hand, display unit 113 displays that the cybersecurity risks for which a response completion signal has not been received have not been responded to.

[0051] The receiving unit 115 is a means for receiving information on cybersecurity risks to be displayed from among the response statuses. The receiving unit 115 receives an input of information on cybersecurity risks to be displayed from the operator of the display device 110.

[0052] Fig. 7 is an example of a display screen for displaying a response status to a cybersecurity risk in the present disclosure. A display screen 30 in Fig. 7 includes a filtering area 31 for filtering the response status to be displayed and a display area 32 for the response status.

[0053] In the example of FIG. 7, organizational unit names are displayed in a three-level hierarchy: company name, business division, and department. Third-party evaluation is selected as the cybersecurity risk diagnostic category. The response status of cybersecurity risks is displayed in four statuses: not responded to, in response (planned), in response (expired), and responded to. Here, not responded to means that there has been no communication from the organization regarding the pointed out cybersecurity risk. In response (planned) means that a communication has been received from the organization regarding the response deadline for the pointed out risk, and in response (expired) means that no signal has been received indicating that the risk has been responded to even after the specified response deadline has passed. In the example of FIG. 7, the importance of risks is displayed in three levels: high, medium, and low.

[0054] 7, the organizational unit name of the risk to be displayed, the response status of the risk, and the importance of the risk can be selected from a pull-down menu or by checking a check box in the filtering area 31. The receiving unit 115 receives information on the cybersecurity risk selected in the filtering area 31.

[0055] In the example of Fig. 7, for the organization, it is selected to display the cybersecurity risks of all company names and division names. As described above, a third-party evaluation is selected as the diagnostic category of cybersecurity risks, but it is also possible to select other diagnostic categories. In the example of Fig. 7, all four response statuses are selected as the response statuses to be displayed, and all three importance levels are selected.

[0056] In the display area 32, a list of the response statuses of cybersecurity risks corresponding to the received cybersecurity risk information is displayed. In the example of FIG. 7, the response status of each risk and the number of cybersecurity risks corresponding to each level of importance are displayed for each organizational unit name. As in the example of FIG. 7, by displaying the number of response statuses for each risk, it is possible to grasp the number of cybersecurity risks that must be responded to. Also, by displaying the number of each level of importance, it is possible to grasp the number of cybersecurity risks that must be dealt with as a priority. Also, by being able to select the organizational unit name or risk response status of the cybersecurity risk to be displayed, the operator can display only the information that is necessary, thereby improving the visibility of the information.

[0057] When a change occurs in the response status of a cybersecurity risk, the display unit 113 may display the updated third-party evaluation value for each organization. The external server periodically evaluates the cybersecurity risk status of the network assets included in the evaluation target, and updates the third-party evaluation value. For example, when the number of unaddressed cybersecurity risks decreases and the number of addressed cases increases, the third-party evaluation value becomes higher. The evaluation acquisition unit 112 periodically acquires the third-party evaluation value from the external server, and the display unit 113 displays the most recently acquired third-party evaluation value.

[0058] The notification unit 116 is a means for notifying the terminal of a person in charge of an organization when a cybersecurity risk is not addressed for a predetermined period of time or longer. For example, in the example of Fig. 7, the notification unit 116 automatically notifies the terminal of the person in charge of a message urging the person in charge to address the cybersecurity risk for unanswered and in-process (expired). Depending on the importance of the cybersecurity risk, the notification unit 116 may notify not only the terminal of the person in charge but also the terminal of the organization manager of the message.

[0059] The operation of the display device 110 configured as above will be described with reference to the flowchart of FIG.

[0060] 8 is a flowchart showing an outline of the operation of the display device 110 in the second embodiment. Note that the processing according to this flowchart may be executed based on program control by the above-mentioned processor.

[0061] 8, the flow of steps S201 to S203 is similar to the flow of steps S101 to S103 in the first embodiment. Moreover, the flow of steps S204 and after does not need to be performed consecutively with the flow of steps S201 to S203, and is executed, for example, when triggered by an operation performed by an operator to display the response status to cybersecurity risks. Similarly, the flow of steps S207 to S208 does not need to be performed subsequent to the flow of steps S204 to S206.

[0062] 8, first, the identifying unit 111 identifies the name of the organizational unit that manages each network asset included in the cybersecurity risk assessment target and the identification information of each network asset (step S201). Next, the evaluation acquisition unit 112 acquires a third-party evaluation value for each organization based on the information that identifies the organizational unit name and the identification information of each network asset (step S202). Next, the display unit 113 displays the third-party evaluation value for each organization (step S203).

[0063] Next, the response acquisition unit 114 acquires the response status to the cybersecurity risk pointed out for each organization (step S204). Next, the reception unit 115 receives information on the cybersecurity risk to be displayed (step S205). Next, the display unit 113 displays the response status of the cybersecurity risk corresponding to the received cybersecurity risk information (step S206). Next, if the cybersecurity risk has not been responded to for a predetermined period of time or more (S207; YES), the notification unit 116 notifies the person in charge at the organization (step S208). On the other hand, if the cybersecurity risk has been responded to before the predetermined period has elapsed (S207; NO), the notification unit 116 does not execute S208 and ends the process. This ends the process according to this flowchart.

[0064] In the display device 110 of the present disclosure, the response acquisition unit 114 acquires the response status for the cybersecurity risks identified for each organization, and the display unit 113 displays the acquired response status. This makes it easier for the operator to understand the cybersecurity risks that need to be addressed.

[0065] In the display device 110, when the receiving unit 115 receives information on a cybersecurity risk to be displayed, the display unit 113 displays the response status of the cybersecurity risk corresponding to the received information. This allows the operator to display only the information that is necessary for him / herself, improving the visibility of the information.

[0066] In the display device 110, the notification unit 116 notifies the terminal of the person in charge of the organization if a cybersecurity risk has not been addressed for a predetermined period of time or more. This makes it possible to prompt the person in charge to address the cybersecurity risk.

[0067] Although the present invention has been described above with reference to the embodiments, the present invention is not limited to the above-mentioned embodiments. Various modifications that can be understood by those skilled in the art can be made to the configuration and details of the present invention within the scope of the present invention.

[0068] For example, although a number of operations are described in a sequence in the form of a flowchart, the sequence does not limit the order in which the operations are performed. Therefore, when implementing each embodiment, the sequence of the operations can be changed as long as it does not affect the content.

[0069] A part or all of the above-described embodiments can be described as, but is not limited to, the following supplementary notes.

[0070] (Appendix 1) An identification means for identifying the name of an organizational unit that manages each network asset included in a cybersecurity risk assessment target and identification information of each of the network assets; an evaluation acquisition means for acquiring a third-party evaluation value for each organization based on information that specifies the organizational unit name and the identification information of each network asset; A display device comprising: a display means for displaying a third-party evaluation value for each organization.

[0071] (Appendix 2) The evaluation acquisition means further acquires a third-party evaluation value for each organization from a predetermined period ago, The display device according to claim 1, wherein the display means further displays a difference in a third-party evaluation value from a predetermined period ago for each organization.

[0072] (Appendix 3) The evaluation acquisition means further acquires a reference value for a third-party evaluation for each organization, 2. The display device according to claim 1, wherein the display means displays the third-party evaluation for each organization in a different manner depending on the difference from the reference value.

[0073] (Appendix 4) The evaluation acquisition means further acquires a third-party evaluation value of the entire organization regarding cybersecurity risk, The display device according to claim 1, wherein the display means displays a third-party evaluation value for each organization and a third-party evaluation value for the entire organization.

[0074] (Appendix 5) The system further includes a response acquisition means for acquiring the response status of each organization to the cybersecurity risks identified, 5. The display device according to any one of claims 1 to 4, wherein the display means further displays the response status for each organization.

[0075] (Appendix 6) Further comprising a receiving means for receiving information on a cybersecurity risk to be displayed from among the response statuses, The display device described in Appendix 5, wherein the display means displays a response status of a cybersecurity risk corresponding to the information.

[0076] (Appendix 7) The display device described in Appendix 5, further comprising a notification means for notifying a terminal of a person in charge at an organization if the cybersecurity risk is not addressed for a predetermined period of time or more.

[0077] (Appendix 8) The display device according to claim 5, wherein the display means displays an updated third-party evaluation value for each organization when a change occurs in the response status.

[0078] (Appendix 9) The computer Identifying the name of the organizational unit that manages each network asset included in the cybersecurity risk assessment target and the identification information of each of the network assets; obtaining a third-party evaluation value for each organization based on information that specifies the organizational unit name and the identification information of each network asset; A method for displaying third-party evaluation scores for each organization.

[0079] (Appendix 10) Further obtain a third-party evaluation value for each organization from a specified period ago, The display method according to appendix 9, further displaying the difference in third-party evaluation value for each organization from a specified period ago.

[0080] (Appendix 11) Further obtain benchmarks for third-party evaluation of each organization, The display method according to claim 9, wherein the third-party evaluation is displayed in a different manner for each organization depending on the difference from the reference value.

[0081] (Appendix 12) Further obtain third-party assessments of the organization's entire cybersecurity risk. A display method as described in Appendix 9, which displays the third-party evaluation value for each organization and the third-party evaluation value for the entire organization.

[0082] (Appendix 13) Obtain the status of response to cybersecurity risks identified for each organization, The display method according to any one of appendices 9 to 12, further displaying the response status for each organization.

[0083] (Appendix 14) Among the response statuses, information on cybersecurity risks to be displayed is received, A display method as described in Appendix 13, which displays the response status of cybersecurity risks corresponding to the information.

[0084] (Appendix 15) The display method described in Appendix 13, in which a notification is sent to a terminal of a person in charge at an organization if the cybersecurity risk is not addressed for a specified period of time or longer.

[0085] (Appendix 16) The display method according to appendix 13, wherein when a change occurs in the response status, an updated third-party evaluation value for each organization is displayed.

[0086] (Appendix 17) On the computer, Identifying the name of the organizational unit that manages each network asset included in the cybersecurity risk assessment target and the identification information of each of the network assets; obtaining a third-party evaluation value for each organization based on information that specifies the organizational unit name and the identification information of each network asset; A program that displays third-party evaluation scores for each organization.

[0087] (Appendix 18) Further obtain a third-party evaluation value for each organization from a specified period ago, The program according to claim 17, further displaying the difference in third-party evaluation value for each organization from a specified period ago.

[0088] (Appendix 19) Further obtain benchmarks for third-party evaluation of each organization, The program according to claim 17, which causes the third-party evaluation to be displayed in a different manner for each organization depending on the difference from the reference value.

[0089] (Appendix 20) Further obtain third-party assessments of the organization's entire cybersecurity risk. The program according to claim 17, which causes a third-party evaluation value for each organization and a third-party evaluation value for the entire organization to be displayed.

[0090] (Appendix 21) Obtain the status of response to cybersecurity risks identified for each organization, The program according to any one of appendices 17 to 20, further executing the program to display the response status for each organization.

[0091] (Appendix 22) Among the response statuses, information on cybersecurity risks to be displayed is received, The program described in Appendix 21, which causes the program to execute the following: displaying the response status of cybersecurity risks corresponding to the information.

[0092] (Appendix 23) The program described in Appendix 21, which executes the following: if the cybersecurity risk is not addressed for a specified period of time or more, a notification is sent to a terminal of a person in charge at an organization.

[0093] (Appendix 24) The program according to claim 21, which causes an updated third-party evaluation value for each organization to be displayed when a change occurs in the response status.

[0094] (Appendix 25) An identification means for identifying identification information of each network asset included in a cybersecurity risk assessment target and the name of an organizational unit that manages each network device; An evaluation acquisition means for acquiring a third-party evaluation value of an entire organization regarding a cybersecurity risk situation and a third-party evaluation value for each organizational unit based on the specified identification information and the organizational unit name; A display device comprising: a display means for displaying a third-party evaluation value of the entire organization and a third-party evaluation value for each organizational unit.

[0095] (Appendix 26) An evaluation acquisition means for acquiring a third-party evaluation value regarding a cybersecurity risk situation; and a display means for displaying a difference in a third-party evaluation value from a predetermined period ago for each organization based on the acquired third-party evaluation value.

[0096] (Appendix 27) A display device having a display means for generating an image including, for each organization, a third-party evaluation value regarding the risk status of cybersecurity and a difference between the third-party evaluation value and the third-party evaluation value from a specified period ago based on the third-party evaluation value, and displaying the generated image.

[0097] (Appendix 28) A display device comprising a display means for displaying a third-party evaluation value for each organization in different manners depending on the difference from a predetermined standard value based on a third-party evaluation value regarding the cybersecurity risk situation. [Explanation of symbols]

[0098] 100, 110 display device 101, 111 Specific part 102, 112 Evaluation Department 103, 113 Display section 114 Correspondence Acquisition Department 115 Reception 116 Notification Department 500 Computer equipment 501 CPU 502 ROM 503 RAM 504 Program 505 Storage device 506 Recording media 507 Drive Unit 508 Communication Interface 511 Input / Output Interface 512 Bus

Claims

1. An identification means for identifying the name of an organizational unit that manages each network asset included in a cybersecurity risk assessment target and identification information of each of the network assets; an evaluation acquisition means for acquiring a third-party evaluation value for each organization based on information that specifies the organizational unit name and the identification information of each network asset; A display device comprising: a display means for displaying a third-party evaluation value for each organization.

2. The evaluation acquisition means further acquires a third-party evaluation value for each organization from a predetermined period ago, The display device according to claim 1 , wherein the display means further displays a difference in the third-party evaluation value from a predetermined period ago for each organization.

3. The evaluation acquisition means further acquires a reference value for a third-party evaluation for each organization, The display device according to claim 1 , wherein the display unit displays the third-party evaluation for each organization in a different manner depending on a difference from the reference value.

4. The evaluation acquisition means further acquires a third-party evaluation value of the entire organization regarding cybersecurity risk, The display device according to claim 1 , wherein the display unit displays the third-party evaluation value for each organization and the third-party evaluation value for the entire organization.

5. The system further includes a response acquisition means for acquiring the response status of each organization to the cybersecurity risks identified, The display device according to claim 1, wherein the display means further displays the response status for each organization.

6. Further comprising a receiving means for receiving information on a cybersecurity risk to be displayed from among the response statuses, The display device according to claim 5 , wherein the display means displays a response status of a cybersecurity risk corresponding to the information.

7. The display device according to claim 5 , further comprising a notification means for notifying a terminal of a person in charge of the organization if the cybersecurity risk is not addressed for a predetermined period of time or longer.

8. The display device according to claim 5 , wherein the display means displays an updated third-party evaluation value for each organization when a change occurs in the response status.

9. The computer Identifying the name of the organizational unit that manages each network asset included in the cybersecurity risk assessment target and the identification information of each of the network assets; obtaining a third-party evaluation value for each organization based on information that specifies the organizational unit name and the identification information of each network asset; A method for displaying third-party evaluation scores for each organization.

10. On the computer, Identifying the name of the organizational unit that manages each network asset included in the cybersecurity risk assessment target and the identification information of each of the network assets; obtaining a third-party evaluation value for each organization based on information that specifies the organizational unit name and the identification information of each network asset; A program that displays third-party evaluation scores for each organization.

Images