| 3.1.1 Require Explicit Authorization for Cataloging (CATALOG_NOAUTH) | CIS IBM DB2 11 v1.0.0 Linux OS Level 1 | Unix | |
| 3.1.2 Secure Permissions for Default Database File Path (DFTDBPATH) - DFTDBPATH OS Permissions | CIS IBM DB2 11 v1.0.0 Linux OS Level 1 | Unix | |
| 3.1.2 Secure Permissions for Default Database File Path (DFTDBPATH) - DFTDBPATH Setting | CIS IBM DB2 11 v1.0.0 Linux OS Level 2 | Unix | |
| 3.1.2 Secure Ppermissions for Default Database File Path (DFTDBPATH) - DFTDBPATH OS Permissions | CIS IBM DB2 11 v1.0.0 Windows OS Level 1 | Windows | |
| 3.1.4 Secure Permissions for All Diagnostic Logs (DIAGPATH) | CIS IBM DB2 11 v1.0.0 Windows OS Level 1 | Windows | |
| 3.1.5 Secure Permissions for Alternate Diagnostic Log Path (ALT_DIAGPATH) | CIS IBM DB2 11 v1.0.0 Linux OS Level 2 | Unix | |
| 3.1.8 Set Maximum Connection Limits (MAX_CONNECTIONS and MAX_COORDAGENTS) - MAX_CONNECTIONS | CIS IBM DB2 11 v1.0.0 Windows OS Level 1 | Windows | |
| 3.1.10 Secure the Java Development Kit Installation Path (JDK_PATH) | CIS IBM DB2 11 v1.0.0 Windows OS Level 2 | Windows | |
| 3.1.11 Secure the Python Runtime Path (PYTHON_PATH) | CIS IBM DB2 11 v1.0.0 Windows OS Level 2 | Windows | |
| 3.2.4 Enable Extended Security (DB2_EXTSECURITY) | CIS IBM DB2 11 v1.0.0 Linux OS Level 2 | Unix | |
| 3.3.1 Secure Db2 Runtime Library | CIS IBM DB2 11 v1.0.0 Linux OS Level 2 | Unix | |
| 4.1.5 Secure Permissions for the Primary Archive Log Location (LOGARCHMETH1) - LOGARCHMETH1 Setting | CIS IBM DB2 11 v1.0.0 Linux OS Level 1 | Unix | |
| 4.1.7 Secure Permissions for the Tertiary Archive Log Location (FAILARCHPATH) - FAILARCHPATH OS Permission | CIS IBM DB2 11 v1.0.0 Linux OS Level 2 | Unix | |
| 4.1.7 Secure Permissions for the Tertiary Archive Log Location (FAILARCHPATH) - FAILARCHPATH Setting | CIS IBM DB2 11 v1.0.0 Windows OS Level 1 | Windows | |
| 4.1.9 Secure Permissions for the Log Overflow Location (OVERFLOWLOGPATH) - OVERFLOWLOGPATH OS Permission | CIS IBM DB2 11 v1.0.0 Linux OS Level 2 | Unix | |
| 4.2.12 Restrict Access to SYSCAT.EVENTS | CIS IBM DB2 11 v1.0.0 Database Level 2 | IBM_DB2DB | |
| 4.2.13 Restrict Access to SYSCAT.EVENTTABLES | CIS IBM DB2 11 v1.0.0 Database Level 2 | IBM_DB2DB | |
| 4.2.15 Restrict Access to SYSCAT.INDEXAUTH | CIS IBM DB2 11 v1.0.0 Database Level 2 | IBM_DB2DB | |
| 4.2.18 Restrict Access to SYSCAT.PACKAGES | CIS IBM DB2 11 v1.0.0 Database Level 2 | IBM_DB2DB | |
| 4.2.47 Restrict Access to SYSSTAT.COLGROUPDIST | CIS IBM DB2 11 v1.0.0 Database Level 2 | IBM_DB2DB | |
| 4.3.3 Restrict Access to SYSIBM.SYSCOLAUTH | CIS IBM DB2 11 v1.0.0 Database Level 1 | IBM_DB2DB | |
| 4.3.9 Restrict Access to SYSIBM.SYSCONTROLDEPENDENCIES | CIS IBM DB2 11 v1.0.0 Database Level 2 | IBM_DB2DB | |
| 4.3.13 Restrict Access to SYSIBM.SYSEVENTTABLES | CIS IBM DB2 11 v1.0.0 Database Level 2 | IBM_DB2DB | |
| 4.3.17 Restrict Access to SYSIBM.SYSPASSTHRUAUTH | CIS IBM DB2 11 v1.0.0 Database Level 2 | IBM_DB2DB | |
| 4.3.18 Restrict Access to SYSIBM.SYSPLANAUTH | CIS IBM DB2 11 v1.0.0 Database Level 2 | IBM_DB2DB | |
| 4.3.27 Restrict Access to SYSIBM.SYSSECURITYLABELACCESS | CIS IBM DB2 11 v1.0.0 Database Level 2 | IBM_DB2DB | |
| 4.3.29 Restrict Access to SYSIBM.SYSSECURITYLABELCOMPONENTS | CIS IBM DB2 11 v1.0.0 Database Level 2 | IBM_DB2DB | |
| 4.3.33 Restrict Access to SYSIBM.SYSSECURITYPOLICYEXEMPTIONS | CIS IBM DB2 11 v1.0.0 Database Level 1 | IBM_DB2DB | |
| 4.3.33 Restrict Access to SYSIBM.SYSSECURITYPOLICYEXEMPTIONS | CIS IBM DB2 11 v1.0.0 Database Level 2 | IBM_DB2DB | |
| 4.3.34 Restrict Access to SYSIBM.SYSSERVEROPTIONS | CIS IBM DB2 11 v1.0.0 Database Level 1 | IBM_DB2DB | |
| 4.3.35 Restrict Access to SYSIBM.SYSSEQUENCEAUTH | CIS IBM DB2 11 v1.0.0 Database Level 2 | IBM_DB2DB | |
| 4.3.36 Restrict Access to SYSIBM.SYSSTATEMENTTEXTS | CIS IBM DB2 11 v1.0.0 Database Level 1 | IBM_DB2DB | |
| 4.3.37 Restrict Access to SYSIBM.SYSSTMT | CIS IBM DB2 11 v1.0.0 Database Level 2 | IBM_DB2DB | |
| 4.4.2 Restrict Access to SYSIBMADM.OBJECTOWNERS | CIS IBM DB2 11 v1.0.0 Database Level 1 | IBM_DB2DB | |
| 4.4.4 Restrict Access to SYSPROC.AUTH_LIST_AUTHORITIES_FOR_AUTHID | CIS IBM DB2 11 v1.0.0 Database Level 2 | IBM_DB2DB | |
| 4.4.6 Restrict Access to SYSPROC.AUTH_LIST_GROUPS_FOR_AUTHID | CIS IBM DB2 11 v1.0.0 Database Level 1 | IBM_DB2DB | |
| 4.4.8 Restrict Access to SYSIBMADM.OBJECTOWNERS | CIS IBM DB2 11 v1.0.0 Database Level 2 | IBM_DB2DB | |
| 4.5.1 Restrict Access to Tablespaces | CIS IBM DB2 11 v1.0.0 Database Level 1 | IBM_DB2DB | |
| 6.1.3 Secure SYSMAINT Authority | CIS IBM DB2 11 v1.0.0 Windows OS Level 1 | Windows | |
| 6.1.4 Secure SYSMON Authority | CIS IBM DB2 11 v1.0.0 Windows OS Level 1 | Windows | |
| 6.1.5 Secure SECADM Authority | CIS IBM DB2 11 v1.0.0 Database Level 2 | IBM_DB2DB | |
| 6.1.7 Secure SQLADM Authority | CIS IBM DB2 11 v1.0.0 Database Level 2 | IBM_DB2DB | |
| 6.1.16 Secure QUIESCECONNECT Authority | CIS IBM DB2 11 v1.0.0 Database Level 2 | IBM_DB2DB | |
| 6.1.19 Secure Schema ACCESSCTRL Authority | CIS IBM DB2 11 v1.0.0 Database Level 1 | IBM_DB2DB | |
| 6.2.2 Review Roles | CIS IBM DB2 11 v1.0.0 Database Level 1 | IBM_DB2DB | |
| 6.2.4 Nested Roles | CIS IBM DB2 11 v1.0.0 Database Level 1 | IBM_DB2DB | |
| 6.2.6 Review Role Grantees with WITH ADMIN OPTION | CIS IBM DB2 11 v1.0.0 Database Level 1 | IBM_DB2DB | |
| 6.3.1 Review Organization's Policies Against Db2 RCAC Policies | CIS IBM DB2 11 v1.0.0 Database Level 1 | IBM_DB2DB | |
| 6.3.3 Review Column Mask Logic According to Policy | CIS IBM DB2 11 v1.0.0 Database Level 1 | IBM_DB2DB | |
| 8.2.3 Secure the Configuration File | CIS IBM DB2 11 v1.0.0 Database Level 2 | IBM_DB2DB | |
