A computer system includes one or more storage devices, and one or more processors. The one or more storage devices store permission management information specifying relations between combinations of an information source and an information type and whether sending information from the information source to an external network system is permitted or prohibited. The one or more processor is configured to receive an information transmission request specifying an information type of first information from a first system of an information source, determine whether sending the first information to outside a network system the first system belongs to is permitted with reference to the permission management information, and select a monitoring/analysis server to receive the first information from the monitoring/analysis servers based on the determination.