Checklist Summary:

Provides prescriptive guidance for establishing a secure configuration posture for IBM Db2 for z/OS. IBM RACF is the security manager referenced in the checklist.

Checklist Role:

• Database Server

Known Issues:

Documented in the checklist

Target Audience:

Security Administrator, Database Administrator, Application Architect

Target Operational Environment:

• Managed
• Specialized Security-Limited Functionality (SSLF)

Testing Information:

IBM Z and z/OS system

Regulatory Compliance:

Provides baseline recommendations for any well configured Db2 for z/OS systems

Comments/Warnings/Miscellaneous:

Not provided.

Disclaimer:

IBM provides this checklist for informational purposes only and not for distribution or sharing with any third parties without IBM’s explicit prior permission. IBM expressly provides this checklist “AS IS”. IBM makes no warranty of any kind, express, implied, in fact or arising by operation of law, including without limitation, the implied warranty of merchantability, fitness for a particular purpose, non-infringement and data accuracy. IBM does not warrant or make any representations regarding the checklist or any results from this checklist, including but not limited to the correctness, accuracy, reliability, or usefulness of the checklist.

Product Support:

No

Point of Contact:

BenchmarkInfo@cisecurity.org

Sponsor:

Not provided.

Licensing:

https://www.ibm.com/legal/copytrade lists United States trademarks owned by IBM and related information

Change History:

New Checklist - 3/20/2023
Change to FINAL - 4/21/23

Dependency/Requirements:

URL	Description

References:

Reference URL	Description
https://www.ibm.com/docs/en/db2-for-zos/13	Db2 13 for z/OS

NIST checklist record last modified on 04/21/2023