| 1.1.1 Install Available Updates | RISK ASSESSMENT, SYSTEM AND INFORMATION INTEGRITY |
| 2.1 Prevent Database Users from Logging into the Operating System | ACCESS CONTROL, MEDIA PROTECTION |
| 3.3.2 Secure the Database Container Directory | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.1 Restrict Access to SYSCAT.AUDITPOLICIES | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.2 Restrict Access to SYSCAT.AUDITUSE | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.3 Restrict Access to SYSCAT.COLAUTH | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.4 Restrict Access to SYSCAT.COLDIST | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.5 Restrict Access to SYSCAT.COLGROUPDIST | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.6 Restrict Access to SYSCAT.COLUMNS | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.7 Restrict Access to SYSCAT.CONTEXTATTRIBUTES | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.8 Restrict Access to SYSCAT.CONTEXTS | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.9 Restrict Access to SYSCAT.CONTROLDEP | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.10 Restrict Access to SYSCAT.CONTROLS | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.11 Restrict Access to SYSCAT.DBAUTH | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.12 Restrict Access to SYSCAT.EVENTS | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.13 Restrict Access to SYSCAT.EVENTTABLES | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.14 Restrict Access to SYSCAT.EXTERNALTABLEOPTIONS | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.15 Restrict Access to SYSCAT.INDEXAUTH | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.16 Restrict Access to SYSCAT.MODULEAUTH | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.17 Restrict Access to SYSCAT.PACKAGEAUTH | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.18 Restrict Access to SYSCAT.PACKAGES | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.19 Restrict Access to SYSCAT.PASSTHRUAUTH | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.20 Restrict Access to SYSCAT.ROLEAUTH | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.21 Restrict Access to SYSCAT.ROLES | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.22 Restrict Access to SYSCAT.ROUTINEAUTH | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.23 Restrict Access to SYSCAT.ROUTINES | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.24 Restrict Access to SYSCAT.SECURITYLABELACCESS | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.25 Restrict Access to SYSCAT.SECURITYLABELCOMPONENTELEMENTS | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.26 Restrict Access to SYSCAT.SECURITYLABELCOMPONENTS | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.27 Restrict Access to SYSCAT.SECURITYLABELS | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.28 Restrict Access to SYSCAT.SECURITYPOLICIES | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.29 Restrict Access to SYSCAT.SECURITYPOLICYCOMPONENTRULES | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.30 Restrict Access to SYSCAT.SECURITYPOLICYEXEMPTIONS | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.31 Restrict Access to SYSCAT.SERVEROPTIONS | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.32 Restrict Access to SYSCAT.SCHEMAAUTH | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.33 Restrict Access to SYSCAT.SCHEMATA | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.34 Restrict Access to SYSCAT.SEQUENCEAUTH | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.35 Restrict Access to SYSCAT.STATEMENTS | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.36 Restrict Access to SYSCAT.STATEMENTTEXTS | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.37 Restrict Access to SYSCAT.SURROGATEAUTHIDS | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.38 Restrict Access to SYSCAT.TABAUTH | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.39 Restrict Access to SYSCAT.TBSPACEAUTH | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.40 Restrict Access to SYSCAT.USEROPTIONS | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.41 Restrict Access to SYSCAT.VARIABLEAUTH | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.42 Restrict Access to SYSCAT.VARIABLES | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.43 Restrict Access to SYSCAT.WORKLOADAUTH | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.44 Restrict Access to SYSCAT.WRAPOPTIONS | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.45 Restrict Access to SYSCAT.XSROBJECTAUTH | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.46 Restrict Access to SYSSTAT.COLDIST | ACCESS CONTROL, MEDIA PROTECTION |
| 4.2.47 Restrict Access to SYSSTAT.COLGROUPDIST | ACCESS CONTROL, MEDIA PROTECTION |
