Risk management support device

A risk management support device connected, via a communication network, to an information system that manages confidential information, the risk management support device comprising:

• an arithmetic unit;
• and
• a storage device storing instructions that, when executed by the arithmetic unit, cause the risk management support device to:
• receive, from the information system, a request to acquire a fictitious code to be set in a part of items in the confidential information as well as a type of the item;
• generate the fictitious code corresponding to a data format of the received type of the item;
• and
• transmit the generated fictitious code to the information system only when uniqueness of the generated fictitious code is recognized,
• wherein the risk management support device is further connected, via the communication network, to an external search system that monitors a web and finds out data that satisfies a search condition among data distributed on the web, and
• the instructions, when executed by the arithmetic unit, further cause the risk management support device to:
• request the external search system to search for data among the data distributed on the web by designating the fictitious code as the search condition, the fictitious code being set as a mark for detecting leakage of the confidential information by the external search system;
• receive, from the external search system, a notification indicating that the fictitious code has been found in the data distributed on the web;
• and
• warn the information system corresponding to the fictitious code that the confidential information has leaked in a case where the notification indicating that the fictitious code has been found is received.