Risk evaluation system, risk evaluation method, and risk evaluation program

Abstract

To provide a technique for presenting a result of evaluating a risk with appropriate content at an appropriate timing in accordance with a purpose of use.SOLUTION: A risk evaluation system is configured to: record input data to be obtained in association with work in a work site and / or an environment of the worksite; detect a safety risk which is a risk related to physical safety of a worker in the worksite; output a safety risk evaluation result representing the safety risk; detect a security risk which is a risk related to information security for control of work equipment in the worksite and / or management of work, on the basis of the safety risk evaluation result and the input data; output a security risk evaluation result representing the security risk; evaluate a productivity risk which is a risk related to productivity of the work in the worksite on the basis of the security risk evaluation result and the input data; and output a productivity risk evaluation result representing the productivity risk.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present disclosure relates to a technique for assessing the risk of a cyber attack. [Background technology]

[0002] Patent Document 1 discloses a risk assessment form generation system that creates a risk assessment form having assessment items according to the state of an evaluation target. The risk assessment form generation system has an assessment item definition information DB that stores assessment items for risk assessment in a project and assessment values ​​corresponding to the assessment items, a causal structure definition information DB that stores parent-child relationships between the assessment items and other assessment items, and an assessment result information DB that stores past assessment results of the project. The risk assessment form generation system selects an assessment item stored in the assessment item definition information DB, and when the selected assessment item appears as a past assessment result of the project stored in the assessment result information DB, selects another assessment item that corresponds to a child item of the parent-child relationship with the selected assessment item from the causal structure definition information DB, and creates an assessment form by replacing the other selected assessment item with the assessment item as a new assessment item.

[0003] Patent Document 2 discloses an analysis result display device that presents a display result that allows the analysis result of the security risk of an information system to be visually understood easily. The risk analysis result display device receives as input configuration information of the information system that is the subject of security risk analysis and the analysis result that is the output of a security risk analysis device that is external to the analysis result display device, and displays the information assets to be protected by security, security protection mechanisms, and external connection parts that can be a gateway for attacks as nodes, and displays the connections between each node as edges on a graph. The analysis results of the level of security realized by the protection mechanisms and the low risk of an attack are quantified, and the quantified level of risk is displayed as the length of the edge. [Prior art documents] [Patent documents]

[0004] [Patent Document 1] JP 2016-62237 A [Patent Document 2] JP 2016-218695 A Summary of the Invention [Problem to be solved by the invention]

[0005] The risk assessment form generation system disclosed in Patent Document 1 creates new assessment items from selected assessment items. This enables risk assessment using the new assessment items. However, the risk assessment form generation system of Patent Document 1 does not take into consideration what kind of risk assessment result information a user needs, or at what timing the user needs the risk assessment result information, due to the user's characteristics.

[0006] The risk analysis result display device disclosed in Patent Document 2 uses analysis results as input and displays a graph that visualizes the level of risk. This allows the user to easily understand the extent of risk at each location. However, the risk analysis result display device in Patent Document 2 does not take into consideration the timing at which the user will require the evaluation results. Since the risk analysis result display device is configured to use analysis results as input, it cannot display the graph until the analysis process is complete.

[0007] One objective of the present disclosure is to provide a technology that enables risk assessment results to be presented with appropriate content at an appropriate timing depending on the purpose. [Means for solving the problem]

[0008] A risk assessment system according to one embodiment included in the present disclosure is a risk assessment system that evaluates risks related to a work site where work equipment and workers work together and outputs an assessment result, and has: a recording unit that records input data acquired in relation to the work at the site and / or the environment of the site; a first evaluation unit that detects safety risks, which are risks related to the physical safety of the workers at the site based on the input data, and outputs a safety risk assessment result representing the safety risks; a second evaluation unit that detects security risks, which are risks related to information security for the control of the work equipment and / or management of the work at the site, based on the safety risk assessment result and the input data, and outputs a security risk assessment result representing the security risk; and a third evaluation unit that evaluates productivity risks, which are risks related to the productivity of work at the site, based on the security risk assessment result and the input data, and outputs a productivity risk assessment result representing the productivity risk. Effect of the Invention

[0009] According to one aspect of the present disclosure, it is possible to present risk assessment results with appropriate content at appropriate timing depending on the purpose. [Brief description of the drawings]

[0010] [Figure 1] 1 is an example of the overall configuration of an automated warehouse system to which a risk assessment system according to one embodiment is applied. [Diagram 2] 13 is an example of event log data stored in an external communication log. [Diagram 3] 4 is an example of event log data accumulated in a facility operation log. [Figure 4] 4 is an example of site environment data stored in a site environment DB. [Diagram 5] 1 is an example of a hardware configuration of a risk assessment system. [Figure 6] 1 is a flowchart of the overall processing of the risk assessment system. [Figure 7] 13 is a display example of a worker terminal at the site. [Figure 8] 13 is a flowchart of a safety risk assessment process. [Figure 9] The input and output of the first analytical model are shown. [Figure 10] 13 is a display example of a worker terminal at the site. [Figure 11] The input and output of the second analytical model are shown. [Figure 12] 13 is a flowchart of a safety risk security viewpoint evaluation process. [Figure 13] The input and output of the third analytical model are shown. [Figure 14] 13 is a display example of an administrator terminal. [Figure 15] 13 is a flowchart of a safety / security risk productivity calculation process. [Figure 16] 13 is a display example of a manager's terminal. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0011] Hereinafter, an embodiment of the present invention will be described with reference to the drawings. Note that the embodiment described below does not limit the invention according to the claims, and not all of the elements and combinations thereof described in the embodiment are necessarily essential to the solution of the invention.

[0012] FIG. 1 shows an example of the overall configuration of an automated warehouse system to which a risk assessment system according to this embodiment is applied.

[0013] The automated warehouse system 1 includes a warehouse management system (WMS) 2, a warehousing and handling system 3, and a risk assessment system 4.

[0014] The warehouse management system 2 is comprised of one or more computers, and receives incoming goods information on goods to be stored and outgoing goods information on goods to be sent from a higher-level server, and transmits incoming goods information or outgoing goods information to the incoming / outgoing goods processing system 3. Incoming goods information includes, for example, information such as the name, quantity, and date of arrival of the goods to be stored. Outgoing goods information includes, for example, information such as the name, quantity, date of departure, and destination of the goods to be sent.

[0015] The warehousing / returning processing system 3 receives incoming goods information, executes warehousing processing, and generates and outputs warehousing management information based on the incoming goods information and the warehousing processing. The warehousing processing is a process of transporting and storing the received goods to a predetermined place in the warehouse. The warehousing processing is performed by cooperation between the workers and the work equipment such as the automatic transport robot 5 and the conveyor 6 described later. The warehousing management information includes, for example, information on the name, quantity, and date of arrival of the received goods. The warehousing / returning processing system 3 also receives outgoing goods information, executes outgoing processing, and generates and outputs outgoing management information based on the outgoing goods information and the outgoing processing. The outgoing processing is a process of transporting and warehousing goods from a predetermined place in the warehouse. The outgoing processing is performed by cooperation between the workers and the work equipment such as the automatic transport robot 5 and the conveyor 6 described later. The outgoing management information includes, for example, information on the name, quantity, and date of departure of the outgoing goods. Furthermore, the incoming / outgoing processing system 3 manages the inventory of goods in the warehouse based on the incoming management information and the outgoing management information.

[0016] The incoming and outgoing goods processing system 3 includes an automatic transport robot 5, a conveyor 6, a sensor 7, and an operator terminal 8.

[0017] The automatic transport robot 5 has the function of transporting luggage from a start point to an end point set in a travel area by autonomously traveling according to a predetermined program run by a computer without the need for human operation.

[0018] The conveyor 6 carries goods to and from the work site.

[0019] The sensor 7 is an anomaly detection sensor capable of detecting anomalies at specific points in the work site. The sensor 7 may be provided at each work location in the work site, or may be provided around a location in the work site where anomalies are likely to occur. The sensor 7 is electrically connected to the risk assessment system 4 so as to be able to transmit detection results. The sensor 7 may be either a contact sensor or a non-contact sensor. The sensor 7 may be selected from, for example, a vibration sensor, a temperature sensor, a pressure sensor, a current sensor, a magnetic sensor, a laser sensor, a camera, a switch, a microphone, and the like, but is not limited to these.

[0020] The worker terminal 8 is a terminal device that gives work instructions to workers working on site and allows the workers to input work results. The worker terminal 8 is carried by the worker, for example. The worker terminal 8 may be a terminal capable of information processing, such as a tablet terminal, a smartphone terminal, a wearable terminal, etc. The worker does not have to carry the worker terminal 8. A stationary information terminal having a large display may be installed in a place where the worker can see it. Such a mobile information terminal or stationary information terminal is an information display device, and is connected to the risk assessment system 4 so as to be able to send and receive signals.

[0021] The risk assessment system 4 is an information processing system that assesses risks related to the warehouse based on various information obtained from the warehouse management system 2 and the incoming / outgoing processing system 3, and outputs the assessment results. The risk assessment system 4 includes a recording unit 9, a safety-related risk assessment unit 10 (first assessment unit), a safety / security perspective risk assessment unit 11 (second assessment unit), and a safety / security productivity perspective risk assessment unit 12 (third assessment unit).

[0022] The recording unit 9 records input data acquired in relation to work at the site and / or the site environment. The recording unit 9 includes an external communication log 13, an equipment operation log 14, and a site environment DB (Database) 15.

[0023] The external communication log 13 accumulates event log data of communications between the warehouse management system 2 and the outside. Specific examples of the event log data will be described later.

[0024] The facility operation log 14 accumulates event log data relating to facility operations that occur in the automatic transfer robot 5, the conveyor 6, etc. Specific examples of the event log data will be described later.

[0025] The site environment DB 15 stores site environment data including the detection results of the sensor 7. Specific examples of the site environment data will be described later.

[0026] The safety-related risk assessment unit 10 detects safety risks, which are risks related to the physical safety of workers at the work site, based on the input data, and outputs a safety risk assessment result indicating the safety risks. The safety-related risk assessment unit 10 transmits the safety risk assessment result to the worker terminal 8 at the timing when the safety risk assessment result is generated.

[0027] The safety / security risk assessment unit 11 detects security risks, which are risks related to the information security of the control of work equipment and / or the management of work at the site, based on the safety risk assessment result and the input data, and outputs a security risk assessment result indicating the security risks. At the timing when the security risk assessment result is generated, the safety / security risk assessment unit 11 transmits the security risk assessment result to the manager terminal 16 used by the manager who manages the site.

[0028] The safety security productivity-based risk assessment unit 12 assesses productivity risk, which is a risk related to the productivity of work at the site, based on the security risk assessment result and the input data, and outputs a productivity risk assessment result indicating the productivity risk. The safety security productivity-based risk assessment unit 12 transmits the security risk assessment result and the productivity risk assessment result to the manager terminal 17 used by the manager at the timing when the productivity risk assessment result is generated.

[0029] An example of the event log data stored in the external communication log 13 is shown in FIG.

[0030] As shown in Fig. 2, each entry in the event log data for external communications includes the source of communication (IP), whitelist, communication type, and occurrence date and time. The source of communication (IP) stores the IP address corresponding to the entry. The whitelist stores whether the entry is on the whitelist or not. The communication type stores the communication type (e.g., data request, control command) corresponding to the entry. The occurrence date and time stores the creation date and time of the event log data corresponding to the entry.

[0031] An example of event log data stored in the facility operation log 14 is shown in FIG.

[0032] As shown in Fig. 3, each entry in the event log data for equipment operation includes the equipment name, operation content, normal / error, and the date and time of occurrence. The equipment name stores the name of the equipment corresponding to the entry (e.g., automatic transport robot, sensor, conveyor). The operation content stores the operation content corresponding to the entry (e.g., deceleration, object detection, stop). The normal / error stores the result of determining whether the operation content corresponding to the entry is normal or an error. The date and time of occurrence stores the date and time of creation of the event log data corresponding to the entry.

[0033] An example of the site environment data stored in the site environment DB 15 is shown in FIG.

[0034] Each entry of the site environment data includes an environment item, an environment value, and normal / abnormal. The environment item (e.g., temperature, human / robot density, visibility) corresponding to the entry is stored in the environment item. The environment value corresponding to the entry is stored in the environment value. The normal / abnormality stores the determination result of whether the environment item corresponding to the entry is normal or abnormal.

[0035] FIG. 5 shows an example of the hardware configuration of the risk assessment system 4 according to this embodiment.

[0036] As shown in FIG. 5, the risk assessment system 4 is composed of a computer in which a processor 18, a main memory 19, a storage device 20, a communication device 21, an input device 22 and a display device 23 are connected via a bus 24.

[0037] The processor 18 is hardware that controls the operation of the entire risk assessment system 4. The processor 18 is not limited to a CPU (Central Processing Unit) and may include a GPU (Graphics Processing Unit) or an ASIC (Application Specific Integrated Circuit). The processor 18 executes software programs read from the storage device 20 to the main memory 19, thereby realizing each function (the recording unit 9, the safety-related risk assessment unit 10, the safety / security perspective risk assessment unit 11, and the safety / security productivity perspective risk assessment unit 12).

[0038] The communication device 21 enables communication with other devices. The input device 22 is a device for inputting information by an operator's operation, for example, for inputting information into various tables set in the storage device 20. The display device 23 displays and outputs the results of the processing performed by the processor 18.

[0039] FIG. 6 is a flowchart of the overall processing of the risk assessment system 4 according to one embodiment.

[0040] When an instruction to execute the overall process is given, in S101, the safety-related risk assessment unit 10 analyzes the input data and judges whether or not a safety threat exists. The process of detecting a safety threat from the input data is performed, for example, by a rule base. In this rule base, for example, threshold values ​​are set for each value of the environmental items (temperature, human / robot density, visibility) shown in FIG. 4, and the threshold values ​​are defined as rules. If the result is affirmative in S101 (S101: Yes), that is, if a safety threat exists, the process proceeds to the next S102. On the other hand, if the result is negative in S101 (S101: No), the process repeats S101.

[0041] In S102, the safety-related risk assessment unit 10 issues a warning to a site worker that a safety threat has occurred at the site. An example of the display on the worker terminal 8 when this warning is issued is shown in Fig. 7. In the example shown in Fig. 7, the part notifying the threat, "A threat has occurred in the warehouse site system", can be displayed at the stage when the safety threat is detected (i.e., S102). After this, the process proceeds to S103.

[0042] In S103, the safety-related risk assessment unit 10 performs a safety risk assessment process. After this, the process branches to S104 and S105. The safety risk assessment process will be described in detail later.

[0043] In S104, the safety-related risk assessment unit 10 presents to the worker terminal 8 a first measure, which is a guideline for on-site workers to avoid safety risks. An example of the display on the worker terminal 8 is shown in Fig. 7. In the example shown in Fig. 7, the portion of the guideline for on-site workers to avoid safety risks, "Pay attention to your surroundings", can be displayed at the stage when the first measure is formulated (i.e., S104). After S104, the processing related to safety risks in the risk assessment system 4 ends.

[0044] In S105, the safety / security risk assessment unit 11 judges whether or not a security threat exists based on the safety risk assessment result and the input data. If the result in S105 is affirmative (S105: Yes), that is, if a security threat exists, the process proceeds to S106. On the other hand, if the result in S105 is negative (S105: No), that is, if a security threat does not exist, the process proceeds to S109.

[0045] In S106, the safety / security viewpoint risk assessment unit 11 performs a safety / security viewpoint evaluation process. After that, the process branches to S107 and S109. The safety / security viewpoint evaluation process will be described in detail later.

[0046] In S107, the safety / security-based risk assessment unit 11 lists risk data with high danger values ​​according to a threshold for the number of risks to be displayed for on-site management (a threshold that predetermines how many risks should be shown to the manager who is the on-site manager).

[0047] In S108, the safety / security-based risk assessment unit 11 presents a primary measure (second measure) for suppressing the impact or expansion of the security risk through operation to the manager terminal 16. After S108, the processing related to the security risk of the risk assessment system 4 ends.

[0048] In S109, the safety / security productivity viewpoint risk assessment unit 12 performs a safety / security risk productivity calculation process. After that, the process proceeds to S110. The safety / security risk productivity calculation process will be described in detail later.

[0049] In S110, the safety / security / productivity-based risk assessment unit 12 presents a fundamental measure (third measure) for preventing the recurrence of the security risk to the manager terminal 17. After S110, the entire processing of the risk assessment system 4 ends.

[0050] FIG. 8 is a flowchart of a safety risk assessment process according to one embodiment.

[0051] In S201, the safety-related risk assessment unit 10 identifies the extent of influence for the input data using a first analytical model. The first analytical model is configured, for example, based on a rule base. The input and output of the first analytical model are shown in FIG. 9. As shown in FIG. 9, input data (equipment operation, on-site environment) is input to the first analytical model, and influence extent data is output. For example, a rule is set such that, when temperature data output from the sensor 7 exceeds a threshold value, a predetermined range around the sensor 7 at the site is set as the influence extent.

[0052] In S202, the safety-related risk assessment unit 10 formats the data of the affected range into an affected area in the form of a map, for example, and notifies the affected area to the worker terminal 8. An example of the display on the worker terminal 8 is shown in Fig. 10. In the example of Fig. 10, the affected area is shown surrounded by a dashed line on a map of the warehouse.

[0053] In S203, the safety-related risk assessment unit 10 performs a safety risk analysis. The safety-related risk assessment unit 10 identifies safety risks on a rule-based basis from input data, for example. Here, the safety risks include, for example, a situation in which the sensors of some of the automatic transport robots 5 are disabled, or a situation in which all of the automatic transport robots 5 are out of control. For example, a rule is set such that, when all of the automatic transport robots 5 report that they are out of control, it is determined that there is a risk to the physical safety of the workers.

[0054] In S204, the safety-related risk assessment unit 10 performs the first risk assessment process using the second analysis model and the first evaluation index. First, the safety-related risk assessment unit 10 evaluates the result of the safety risk assessment using the first evaluation index and judges whether or not a safety risk countermeasure is required. The safety risk countermeasure is a guideline for workers at the site to avoid safety risks. For example, a rule is defined as the first evaluation index for judging that a safety risk countermeasure is required when there is a specific safety risk. If it is judged that a safety risk countermeasure is required, the safety-related risk assessment unit 10 then uses the second analysis model to identify the safety risk countermeasure to be implemented. The input and output of the second analysis model are shown in FIG. 11. The second analysis model is configured, for example, by a rule base, and identifies a safety risk countermeasure (first countermeasure) from input data and safety risk information.

[0055] In S205, the safety-related risk assessment unit 10 displays the generated safety risk countermeasures on the operator terminal 8.

[0056] FIG. 12 is a flowchart of a safety risk security viewpoint evaluation process according to an embodiment.

[0057] In S301, the safety / security viewpoint risk assessment unit 11 receives a safety risk and a safety risk countermeasure from the safety-related risk assessment unit 10.

[0058] In S302, the safety / security-point of-view risk assessment unit 11 extracts security-point of view risk items to be assessed from safety risks and safety risk countermeasures. This extraction process is performed, for example, on a rule base.

[0059] In S303, the safety / security-perspective risk assessment unit 11 uses the third analysis model to perform a detailed analysis of security risks for the extracted security-perspective risk items. Input and output of the third analysis model are shown in Fig. 13. The third analysis model is configured, for example, by a rule base, and identifies the detailed analysis results from the security-perspective risk items and input data.

[0060] In S304, the safety / security viewpoint risk assessment unit 11 performs a second risk assessment process using the detailed analysis result and the second evaluation index. This second risk assessment process is performed, for example, on a rule base. In this second risk assessment process, a primary measure (second measure) is identified from the detailed analysis result based on the second evaluation index. The primary measure is a measure to suppress the impact or expansion of the security risk by operating an operation rule and / or a management system.

[0061] In S305, the safety / security-oriented risk assessment unit 11 displays the primary countermeasures on the manager terminal 16. An example of the display on the manager terminal 16 is shown in FIG. 14. FIG. 14 shows the results of detailed analysis of risk items to be evaluated from a security perspective (two items: intrusion by a malicious user from outside and hijacking of the management system) based on input data from the field. In one example, the input data shows that there is a control command from a communication source not on the whitelist and that the transport robot has decelerated, and therefore the detailed analysis result shows that there is a suspicion of intrusion by a malicious user from outside. Then, "addition of operation rules" is shown as the primary countermeasure. The "operation rules" here are rules that workers should follow regarding information management. Examples of "addition of operation rules" include fixing the terminal used by each worker to one and not sharing each worker's ID and password with others.

[0062] FIG. 15 is a flowchart of a safety / security risk productivity calculation process according to an embodiment.

[0063] In S401, the safety / security / productivity-based risk assessment unit 12 receives the safety risk, the security risk, and the primary countermeasure from the safety / security-based risk assessment unit 11.

[0064] In S402, the safety / security / productivity-based risk assessment unit 12 identifies fundamental measures (third measures) from the safety risks, security risks, and primary measures. The fundamental measures are measures to prevent the recurrence of the security risk by business rules and / or the configuration of the management system. This identification process is performed, for example, by a rule base. The safety / security / productivity-based risk assessment unit 12 also calculates the risk occurrence probability (security risk occurrence probability).

[0065] In S403, the safety security productivity-based risk assessment unit 12 analyzes the impact of fundamental measures on productivity. In this process, for example, the productivity expected when the fundamental measures are implemented is calculated based on the content of the fundamental measures and the operation data indicating the current production situation, using a rule base.

[0066] In S404, the safety / security / productivity-based risk assessment unit 12 calculates a change in productivity based on the result of analyzing the impact of the fundamental measures on productivity. For example, the safety / security / productivity-based risk assessment unit 12 calculates a productivity decline rate by comparing the productivity after the fundamental measures are implemented with the current productivity. This calculation result is displayed on the manager terminal 17 as risk content and countermeasure proposals. An example of the display on the manager terminal 17 is shown in FIG. 16. FIG. 16 shows the result of a detailed analysis of risk items (intrusion by malicious users, takeover of the management system, takeover of the entire system) that should be evaluated from a security perspective based on input data from the field. An example of "adding business rules" in FIG. 16 can be, for example, having another person (superior, other department, next process, manager, etc.) check the work performed by the worker.

[0067] As described above, in this embodiment, the above-mentioned processing makes it possible to present the risk assessment result with appropriate content at an appropriate timing depending on the purpose.

[0068] The above-described embodiments of the present invention are merely illustrative examples of the present invention, and are not intended to limit the scope of the present invention to these embodiments. Those skilled in the art can implement the present invention in various other forms without departing from the scope of the present invention.

[0069] In the above-described embodiment, an example of applying the risk assessment system of the present invention to an automated warehouse system was described, but this is not limited to this, and the risk assessment system of the present invention may also be applied to a manufacturing factory for producing products. [Explanation of symbols]

[0070] 1: automated warehouse system, 2: warehouse management system, 3: incoming / outgoing processing system, 4: risk assessment system, 5: automatic transport robot, 6: conveyor, 7: sensor, 8: worker terminal, 9: recording unit, 10: safety-related risk assessment unit (first assessment unit), 11: safety / security perspective risk assessment unit (second assessment unit), 12: safety / security productivity perspective risk assessment unit (third assessment unit), 13: external communication log, 14: equipment operation log, 15: site environment DB, 16: administrator terminal, 17: manager terminal

Claims

1. A risk assessment system for assessing risks related to a work site where work equipment and workers work together and outputting an assessment result, a recorder for recording input data acquired in relation to work at the site and / or the environment of the site; a first evaluation unit that detects a safety risk, which is a risk related to the physical safety of the worker at the work site, based on the input data, and outputs a safety risk evaluation result representing the safety risk; a second evaluation unit that detects a security risk, which is a risk related to information security for control of the work equipment and / or management of the work at the site, based on the safety risk evaluation result and the input data, and outputs a security risk evaluation result indicating the security risk; a third evaluation unit that evaluates a productivity risk, which is a risk related to the productivity of work at the site, based on the security risk evaluation result and the input data, and outputs a productivity risk evaluation result indicating the productivity risk; A risk assessment system having:

2. The first evaluation unit transmits the safety risk assessment result to a user terminal used by the on-site worker at a timing when the safety risk assessment result is generated, The second evaluation unit transmits the security risk evaluation result to an administrator terminal used by an administrator who manages the site at a timing when the security risk evaluation result is generated, The third evaluation unit transmits the security risk evaluation result and the productivity risk evaluation result to a manager terminal used by the manager at a timing when the productivity risk evaluation result is generated. The risk assessment system according to claim 1 .

3. The first evaluation unit further outputs a first measure, which is a guideline for the on-site worker to avoid the safety risk, in the safety risk evaluation result; The second evaluation unit further outputs, in the security risk evaluation result, a second measure which is a measure for suppressing an influence or an expansion of the security risk through an operation, The third evaluation unit further outputs a third measure, which is a measure for preventing a recurrence of the security risk, in the productivity risk evaluation result. The risk assessment system according to claim 1 .

4. The first measure includes information representing an area where the safety risk may be posed to the workers at the site; The risk assessment system according to claim 3 .

5. The second measure is a measure to suppress the impact or expansion of the security risk on the site by operating an information security operation rule and / or a management system. The risk assessment system according to claim 3 .

6. The third measure is a measure to prevent the recurrence of the security risk by configuring business rules and / or management systems related to the on-site work. The risk assessment system according to claim 3 .

7. The site is a manufacturing plant where operations are performed to manufacture products. The risk assessment system according to claim 1 .

8. The site is a logistics warehouse where goods are stored, managed, and transported. The risk assessment system according to claim 1 .

9. A risk assessment method for assessing a risk related to a work site where a work machine and a worker work together and outputting an assessment result, comprising: recording input data acquired relating to operations at the site and / or an environment at the site; Detecting a safety risk, which is a risk related to the physical safety of the worker at the work site, based on the input data, and outputting a safety risk assessment result representing the safety risk; Detecting a security risk, which is a risk related to information security of the control of the work equipment and / or the management of the work at the site, based on the safety risk assessment result and the input data, and outputting a security risk assessment result representing the security risk; Based on the security risk assessment result and the input data, a productivity risk, which is a risk related to the productivity of work at the site, is assessed, and a productivity risk assessment result indicating the productivity risk is output. Risk assessment methods.

10. A risk assessment program for causing a computer to execute a process of evaluating a risk related to a work site where a work machine and a worker work together and outputting an evaluation result, The computer includes: recording input data acquired relating to operations at the site and / or an environment at the site; Detecting a safety risk, which is a risk related to the physical safety of the worker at the work site, based on the input data, and outputting a safety risk assessment result representing the safety risk; Detecting a security risk, which is a risk related to information security of the control of the work equipment and / or the management of the work at the site, based on the safety risk assessment result and the input data, and outputting a security risk assessment result representing the security risk; A productivity risk, which is a risk related to the productivity of work at the site, is evaluated based on the security risk evaluation result and the input data, and a productivity risk evaluation result indicating the productivity risk is output. Risk assessment program.

Images