Recently, along with the increase in the importance of data protection, there are increasing demands for constructing a computer system capable of protecting data even when widespread disaster occurs. In order to reduce the risk of data loss even when widespread disaster occurs, the present invention computes the risk of data loss for each replication relationship of data (combination of storage subsystems storing the same data), and allocates data so that the risks of losing data of all replication relationships are optimized.