Details

Periodic review of these groups is required to ensure that non-essential groups do not have unnecessary authorization.

Solution

Alter the value of the DB2_GRP_LOOKUP environment variable so that it includes only the appropriate groups listed within the local machine/domain.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/162

This security hardening control applies to the following category of controls within NIST 800-53: Access Control.This control applies to the following type of system Windows.

References

• 800-53|AC-6

Source

• Tenable.com/audits