A system for supporting security administration in a network system, includes a node-information memory storing node information indicative of security functions provided by hardwares and softwares of the network system, for each of the hardwares and each of the softwares, an input device which receives a set of rules as guidance relating to security of the network system, and topology information indicative of hardwares of the network system and softwares installed in each of the hardwares, and a correspondence maker which, based on the node information, makes correspondence between each of the rules and each of the hardwares or softwares indicated by the topology information.