Find sensitive data leaving the program

Find fields holding personal or financial data whose values reach somewhere outside the program: a file, a queue, a screen, a report, an IMS segment or a called program. Names are matched conventionally, then each candidate is traced through the moves and records that carry it, so a field that reaches a report only inside a copied record is still found. The route is reported alongside each hit, because a name is evidence rather than proof and every result needs to be judged.