In a management computer, a memory stores: association information indicating an association among a first physical computer, a virtual computer that is implemented by the first physical computer, a first physical resource that is allocated to the virtual computer, and a user who uses the virtual computer; failure information indicating a failed physical resource; and an upper limit value for a destruction amount as an amount of a physical resource that has failed by being used by the user. A processor calculates the destruction amount, and transmits, upon determining that the first physical resource has failed, that the destruction amount is equal to or less than the upper limit value, and that any of a plurality of physical computers includes the second physical resource, to the first physical computer an instruction to allocate a second physical resource as a replacement for the first physical resource to the virtual computer.