A risk monitoring system is formed of a client terminal, a risk management apparatus, and a security device. A risk calculation portion in the risk management apparatus calculates the vulnerability of each room inside the workplace quantitatively in terms of three viewpoints: individuals, assets, and space, and calculates a risk value of an internal crime in each room in real time by multiplying the vulnerability by the internal crime probability and the asset value. A risk analysis portion analyzes a risk state on the basis of the risk value thus calculated and the analysis result is displayed on a display portion of the client terminal. It is thus possible to understand a risk situation of an internal crime against assets to protect in real time for enabling an action to be taken appropriately according to the situation.