A policy integrity validating unit validates whether a system model can achieve an objective set up in a policy without violating a constraint set up in the policy when a system model is operated according to a procedure set up in the policy. When the policy integrity validating unit determines that there is no integrity between a policy created by a system administrator and the system model, an alternate policy creating unit creates an alternate policy that replaces the policy created by the system administrator. Upon receipt of the alternate policy, the policy integrity validating unit validates integrity between the alternate policy and the system model. When the policy integrity validating unit determines that there is integrity between the alternate policy and the system model, a policy creating apparatus presents the alternate policy to the system administrator.