1. An information processor comprising: a configuration management database that stores resources, personnel, processes, and privileges provided on the resources, as configuration items, respectively, wherein the configuration management database prescribes relations between the configuration items including a privilege-dependency relationship between a privilege on a resource and a privilege on another resource required to exercise the privilege on the resource, a privilege-request relationship between a process and a privilege required for the process, and a privilege-giving relationship between certain of the personnel and a privilege given to the certain of the personnel; and a privilege deriving unit that accesses the configuration management database, responsive to a process to be executed being assigned to corresponding personnel, to derive a goal state of a privilege to be given to the corresponding personnel by accessing a given privilege-request relationship for the process to be executed.