A data processing system (102) determines whether or not the access destination according to an access request from an access request source is an infectable storage device that is a storage device (111) that may already store data that has not been virus scanned, and the system changes the virus scan mode executed with respect to the object data of the access request according to the results of the determination as to whether or not the access destination is an infectable storage device.