A security-training support apparatus is an apparatus for generating a scenario of a targeted attack by a virtual attacker which is formed from a plurality of chronological steps and in which processing to be executed in each of the plurality of steps is defined. The security-training support apparatus includes: an information acquisition unit that at least acquires information specifying a set number of the plurality of steps; and a scenario generation unit that generates the scenario of the targeted attack by, until the set number is reached, selecting, for each of the plurality of steps, processing to be executed in the step from a database in which processing elements that can be executed in the step are registered.