An electronic device and a method for suggesting a response manual in the occurrence of a denial are provided. The electronic device and the method, according to various embodiments, are capable of: recognizing a policy violation occurring due to an access which does not match a pre-stored security policy; recording, as an access refusal log, information on the policy violation including information of the subject of the access or information of the object of the access, when the access corresponding to the policy violation is not permitted; and notifying a message representing the policy violation via a user interface, in response to the access refusal log. In addition, other embodiments are available.