To provide an information management system and an information access management device for managing access control to data in accordance with a user and a plurality of locations.

The information access management device 8 is provided with: a receiving means 20 for receiving user information and position information on the terminal device 1 from a terminal device 1; a user research means 31 for outputting access authority information on a user of the terminal device 1 on the basis of the user information; an access environment research means 30 for outputting the access environment information on the terminal device 1 on the basis of the position information; a security policy storage means 19 for storing conditions to access information which includes the access authority information and the access environment information and is stored in a data storage means 18; and an information access control means for determining the access authority of the user of the terminal device 1 by comparing the access authority information and the access environment information with the condition and controlling an access to the information according to the condition.