Compliance

Hello Folks,

I am supporting a client with specific compliance rules/requirements for DB2.

Is there a support group, forum, documentation set, or other source that could assist with methods for verifying/validating compliance with rules such as "The DBMS must recognize only system-generated session identifiers."?

If this subject is too sensitive for this forum, and you know of a private forum, please advise.

Thanks much,

Fergie