Review Organization's Policies Against Db2 RCAC Policies

中级别 1人工审核db2

说明

DB2 Row and Column Access Control (RCAC) Policies control access to Db2 tables. They should match the organization's security and database access policies, and they should be regularly reviewed for gaps. Default: Not installed

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

Schedule and complete a regular review of all organization security and data access database policies against the current Db2 policies to determine if gaps exist. 1. Identify each written organization policy. 2. Find the matching Db2 RCAC policy. 3. Determine if the RCAC policy applies and correctly supports the written policy. 4. If no matching Db2 RCAC policy is found, record a 'gap' for future remediation.

修复方式

修复方法: 操作指南或基础设施补丁

1. Create RCAC policies for each 'gap' listed from the Audit procedure. 2. Review the newly created Db2 RCAC policy against the organization's written policies.

属性

操作系统: 任意
标签: db2databasemanual
参考: CIS IBM Db2 12.1 Benchmark v1.0.0 - 6.3.1 Review Organization's Policies Against Db2 RCAC Policies