Information notification method and information notification device

An information notification device comprising:

• a processor;
• and
• memory connected to the processor, wherein by using the memory, the processor operates as:
• an obtainer that obtains a plurality of incident information items on a plurality of incidents caused by cyber attacks on a monitoring target during a first period in past;
• a determiner that determines, based on the plurality of incident information items obtained, for each type of the plurality of incidents:
• an incident trend of incidents of the type in the monitoring target during a second period in future;
• and a priority of a provisional response or a permanent response to an incident of the type;
• and
• a presenter that presents the incident trend and the priority that are determined for each type of the plurality of incidents.