IDUG NA 2025

When we talk about Mainframe Modernization, we usually discuss DevOps, Zowe, APIs, Java, Python, etc, but how often does anyone talk about how your security posture needs to be modernized?  Many of these systems were built 30–40 years ago when it was just batch, IMS and CICS.  Now we have traffic coming in from everywhere, whether it is via APIs, distributed Db2, or other means, you need to make sure you are prepared to monitor that traffic to prevent DDoS attacks, and make sure nobody is getting at your most sensitive data.  I will discuss some of the core Db2 Security features that companies should consider using along with Data Access Monitors like Guardium.