Abstract
This report shows some results which we analyzed about a correlation between corporate management and costs for information security.
Even if many enterprises make costs for information security, we are not able to find that costs to affect the added value and corporate values in the whole industry.
But it was revealed that costs for information security influenced corporate values in information and communication industry and retail trade.
In addition, it is difficult to find influences to management performances only by the consciousness for information security measures of the manager. Organizations such as enterprises must take risk management measures for information security by organized systems in mid-and-long term.