| 1.1 Install the latest fix packs | CIS IBM DB2 v10 v1.1.0 Database Level 2 | IBM_DB2DB | |
| 1.1.15 Ensure separate partition exists for /var/log | CIS Amazon Linux 2 STIG v2.0.1 L2 Server | Unix | AUDIT AND ACCOUNTABILITY, CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 1.3 Leverage the least privilege principle | CIS IBM DB2 v10 v1.1.0 Database Level 2 | IBM_DB2DB | |
| 2.13 Disable operations on legacy registry (v1) | CIS Docker 1.12.0 v1.0.0 L1 Docker | Unix | CONFIGURATION MANAGEMENT |
| 3.1.1 Disable IPv6 | CIS Amazon Linux 2 STIG v2.0.1 L2 Server | Unix | CONFIGURATION MANAGEMENT |
| 3.4.2 Ensure SCTP is disabled | CIS Amazon Linux 2 STIG v2.0.1 L2 Server | Unix | CONFIGURATION MANAGEMENT |
| 4.1.1 Creating the Database Without PUBLIC Grants (RESTRICTIVE) | CIS IBM DB2 12.1 v1.0.0 Database Level 2 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 4.1.1 Creating the Database Without PUBLIC Grants (RESTRICTIVE) | CIS IBM DB2 11 v1.2.0 Database Level 2 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 4.1.2.1 Ensure audit log storage size is configured | CIS Amazon Linux 2 STIG v2.0.1 L2 Server | Unix | AUDIT AND ACCOUNTABILITY |
| 4.1.2.5 Ensure system is disabled when audit logs are full | CIS Amazon Linux 2 STIG v2.0.1 L2 Server | Unix | AUDIT AND ACCOUNTABILITY |
| 4.1.2.7 Ensure audit_backlog_limit is sufficient | CIS Amazon Linux 2 STIG v2.0.1 L2 Server | Unix | AUDIT AND ACCOUNTABILITY |
| 4.4 Review Row Permission logic according to policy | CIS IBM DB2 v10 v1.1.0 Database Level 2 | IBM_DB2DB | |
| 5.1 Enable Backup Redundancy | CIS IBM DB2 v10 v1.1.0 Database Level 2 | IBM_DB2DB | |
| 5.3.23 Ensure SSH AllowTcpForwarding is disabled | CIS Amazon Linux 2 STIG v2.0.1 L2 Server | Unix | CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION |
| 6.1 Restrict Access to SYSCAT.AUDITPOLICIES | CIS IBM DB2 v10 v1.1.0 Database Level 2 | IBM_DB2DB | ACCESS CONTROL |
| 6.1.1 Audit system file permissions | CIS Amazon Linux 2 STIG v2.0.1 L2 Server | Unix | CONFIGURATION MANAGEMENT |
| 6.5 Restrict Access to SYSCAT.EVENTS | CIS IBM DB2 v10 v1.1.0 Database Level 2 | IBM_DB2DB | ACCESS CONTROL |
| 6.8 Restrict Access to SYSCAT.INDEXAUTH | CIS IBM DB2 v10 v1.1.0 Database Level 2 | IBM_DB2DB | ACCESS CONTROL |
| 6.9 Restrict Access to SYSCAT.PACKAGEAUTH | CIS IBM DB2 v10 v1.1.0 Database Level 2 | IBM_DB2DB | ACCESS CONTROL |
| 6.10 Restrict Access to SYSCAT.PACKAGES | CIS IBM DB2 v10 v1.1.0 Database Level 2 | IBM_DB2DB | ACCESS CONTROL |
| 6.11 Restrict Access to SYSCAT.PASSTHRUAUTH | CIS IBM DB2 v10 v1.1.0 Database Level 2 | IBM_DB2DB | ACCESS CONTROL |
| 6.17 Restrict Access to SYSCAT.ROUTINEAUTH | CIS IBM DB2 v10 v1.1.0 Database Level 2 | IBM_DB2DB | ACCESS CONTROL |
| 6.21 Restrict Access to SYSCAT.STATEMENTS | CIS IBM DB2 v10 v1.1.0 Database Level 2 | IBM_DB2DB | ACCESS CONTROL |
| 6.25 Restrict Access to SYSCAT.MODULEAUTH | CIS IBM DB2 v10 v1.1.0 Database Level 2 | IBM_DB2DB | ACCESS CONTROL |
| 6.30 Restrict Access to SYSIBMADM.OBJECTOWNERS | CIS IBM DB2 v10 v1.1.0 Database Level 2 | IBM_DB2DB | ACCESS CONTROL |
| 6.31 Restrict Access to SYSIBMADM.PRIVILEGES | CIS IBM DB2 v10 v1.1.0 Database Level 2 | IBM_DB2DB | ACCESS CONTROL |
| 7.1 Ensure 'Symmetric Key encryption algorithm' is set to 'AES_128' or higher in non-system databases | CIS Microsoft SQL Server 2022 v1.3.0 L1 Database Engine MS_SQLDB | MS_SQLDB | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.1 Ensure 'Symmetric Key encryption algorithm' is set to 'AES_128' or higher in non-system databases | CIS Microsoft SQL Server 2019 v1.6.0 L1 Database Engine MS_SQLDB | MS_SQLDB | ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 7.11 Secure CREATAB Authority | CIS IBM DB2 v10 v1.1.0 Database Level 2 | IBM_DB2DB | |
| 7.13 Secure CONNECT Authority | CIS IBM DB2 v10 v1.1.0 Database Level 2 | IBM_DB2DB | |
| 7.15 Secure EXTERNALROUTINE Authority | CIS IBM DB2 v10 v1.1.0 Database Level 2 | IBM_DB2DB | |
| 7.16 Secure QUIESCECONNECT Authority | CIS IBM DB2 v10 v1.1.0 Database Level 2 | IBM_DB2DB | |
| 8.1 Review Roles | CIS IBM DB2 v10 v1.1.0 Database Level 2 | IBM_DB2DB | |
| 8.2 Review Role Members | CIS IBM DB2 v10 v1.1.0 Database Level 2 | IBM_DB2DB | |
| 8.2.1 Encrypt the Database | CIS IBM DB2 12.1 v1.0.0 Database Level 2 | IBM_DB2DB | IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION |
| 8.2.2 Do Not Use Encryption Algorithms that are Not Secure | CIS IBM DB2 12.1 v1.0.0 Database Level 2 | IBM_DB2DB | SYSTEM AND SERVICES ACQUISITION |
| 8.2.3 Secure the Configuration File | CIS IBM DB2 11 v1.2.0 Database Level 2 | IBM_DB2DB | ACCESS CONTROL, MEDIA PROTECTION |
| 8.2.6 Create a Strong Password | CIS IBM DB2 12.1 v1.0.0 Database Level 2 | IBM_DB2DB | IDENTIFICATION AND AUTHENTICATION |
| 8.2.6 Create a Strong Password | CIS IBM DB2 11 v1.2.0 Database Level 2 | IBM_DB2DB | IDENTIFICATION AND AUTHENTICATION |
| 8.2.7 Backup Your Keystore | CIS IBM DB2 12.1 v1.0.0 Database Level 2 | IBM_DB2DB | CONTINGENCY PLANNING |
| 8.2.9 Rotate the Master Key | CIS IBM DB2 12.1 v1.0.0 Database Level 2 | IBM_DB2DB | IDENTIFICATION AND AUTHENTICATION |
| 8.2.9 Rotate the Master Key | CIS IBM DB2 11 v1.2.0 Database Level 2 | IBM_DB2DB | IDENTIFICATION AND AUTHENTICATION |
| 8.2.10 Turn Off ALLOW_KEY_INSERT_WITHOUT_KEYSTORE_BACKUP | CIS IBM DB2 12.1 v1.0.0 Database Level 2 | IBM_DB2DB | CONFIGURATION MANAGEMENT |
| 8.2.11 Keep Master Key Labels Unique | CIS IBM DB2 12.1 v1.0.0 Database Level 2 | IBM_DB2DB | CONFIGURATION MANAGEMENT |
| 8.2.13 Set CFG Values in a Single Command | CIS IBM DB2 12.1 v1.0.0 Database Level 2 | IBM_DB2DB | CONFIGURATION MANAGEMENT |
| 8.2.13 Set CFG Values in a Single Command | CIS IBM DB2 11 v1.2.0 Database Level 2 | IBM_DB2DB | CONFIGURATION MANAGEMENT |
| 8.4 Review Roles granted to PUBLIC | CIS IBM DB2 v10 v1.1.0 Database Level 2 | IBM_DB2DB | |
| 9.3 Review System Tablespaces | CIS IBM DB2 v10 v1.1.0 Database Level 2 | IBM_DB2DB | CONFIGURATION MANAGEMENT |
| 9.8 Ensure Trusted Contexts are enabled | CIS IBM DB2 v10 v1.1.0 Database Level 2 | IBM_DB2DB | |
| 9.12 Ensure audit policies are enabled within the database | CIS IBM DB2 v10 v1.1.0 Database Level 2 | IBM_DB2DB | |
