Scenario: Securing data access with Db2 facilities at Spiffy Computer

This scenario describes a simple approach to securing local and remote access to the sensitive data of employees, payroll operations, and payroll management at Spiffy Computer Company. It shows how to enforce a security plan by using authorization IDs, roles, privileges, authorities, and the audit trace.

You should base your security plan, techniques, and procedures on your actual security objectives; do not view this sample security plan as an exact model for your security needs. Instead, use it to understand various possibilities and address problem areas that you might encounter when you implement your security plan.