A support apparatus (600, 600a), comprising: a forming/editing part (602, 602a), which is adapted to provide a first user interface for forming or editing a user program (1086, 1086a) defining contents of a control arithmetic operation executed by a control apparatus (100, 100a) which executes a control arithmetic operation for controlling a control target; and an output part (110a, 110) which is adapted to output the user program (1086, 1086a) formed via the first user interface provided by the forming/editing part (602, 602a), wherein in the step of providing the first user interface, as an instruction constituting the user program (1086, 1086a), the forming/editing part (602, 602a) is adapted to provide a second user interface which is adapted to receive a selection of a change instruction (860, 860a) for changing a behavior of a security monitoring device (200, 200a), said changing a behavior being carried out by executing a security protection process in correspondence with one of security levels in accordance with at least one of action states of the control apparatus (100, 100a) comprising a detection of a security event which is possible to occur in the control apparatus and comprising an execution of a process in correspondence with the security event, wherein the support apparatus (600, 600a) is characterized in that the second user interface is adapted to comprise a level corresponding region for associating an action state of the control apparatus with a respective security level, the level corresponding region is adapted to comprise of a state displaying region in which the action state of the control apparatus is defined and a level input region in which the security level corresponding to the respective action state is received. a forming/editing part (602, 602a), which is adapted to provide a first user interface for forming or editing a user program (1086, 1086a) defining contents of a control arithmetic operation executed by a control apparatus (100, 100a) which executes a control arithmetic operation for controlling a control target; and an output part (110a, 110) which is adapted to output the user program (1086, 1086a) formed via the first user interface provided by the forming/editing part (602, 602a), wherein in the step of providing the first user interface, as an instruction constituting the user program (1086, 1086a), the forming/editing part (602, 602a) is adapted to provide a second user interface which is adapted to receive a selection of a change instruction (860, 860a) for changing a behavior of a security monitoring device (200, 200a), said changing a behavior being carried out by executing a security protection process in correspondence with one of security levels in accordance with at least one of action states of the control apparatus (100, 100a) comprising a detection of a security event which is possible to occur in the control apparatus and comprising an execution of a process in correspondence with the security event, wherein the support apparatus (600, 600a) is characterized in that the second user interface is adapted to comprise a level corresponding region for associating an action state of the control apparatus with a respective security level, the level corresponding region is adapted to comprise of a state displaying region in which the action state of the control apparatus is defined and a level input region in which the security level corresponding to the respective action state is received.