The policy setting support tool according to the present invention simplifies the operation required for setting up policies by providing a policy creation unit 102 and a user interface unit 101. The policy creation unit 102 creates a draft policy from a combination of sample policies prepared for each kind of software, association information providing information on the programs that are likely to access a given object, and an access log showing a history of behavior of a given program. A user interface unit 101 displays the draft policy and allows the user to check and revise it. The support tool also facilitates the maintenance of policies, by providing a differential detection unit 104 for detecting items for suggested change referring to the current object 112 and the subject information database 113, for presenting them to the user as through a user interface unit 101, and for allowing the user to revise the policy in simplified operation.