IDUG EMEA 2026

As cyber threats grow increasingly sophisticated, ensuring the security of Db2 for z/OS environments is critical to protecting sensitive data and maintaining compliance. This presentation explores a comprehensive security assessment designed to identify vulnerabilities, evaluate access controls, and strengthen configurations. Experts with extensive mainframe experience will review key elements such as grants and permissions, DSNZPARMs, audit policies, and DDF settings, providing detailed findings and actionable recommendations. Attendees will gain insights into optimizing user privileges, securing data, while also preparing for an easier transition to external security. Enhance your security posture and mitigate risks with proven strategies tailored to Db2 for z/OS.

This session will cover the new features in Db2 12.1 security, covering 12.1.3, 12.1.4 and 12.1.5. Attend to hear about new auditing capabilities, including audit to cloud object storage, and directly to CSV files. You will also learn about new JWT authentication enhancements features online key retrieval. 12.1.5 sees the completion of the reduce file permission feature started in 12.1.2 that really locks down a Db2 instance. You will also hear about new Quantum Safe Crypto support in TLS.

This session is a deep dive into 3 new Db2 12.1 security features, Reduce file permissions, RCAC mask at read enhancements, and defining a Trusted Context using the new trust procedure and client callbacks. This will be a face paced session offering practical details on how to make use of these new features in more depth than a what's new session can cover. Reduced file permissions address the common concern of everyone having access to the db2diag.log (and others). Mask at read offers an alternative masking behaviour with fundamental changes to SQL behaviour. And Trust Procedures allow custom definitions of trust for determining a trusted connection.

Are you, and all of your sub-systems, ready for Db2 vNext that is coming to an enterprise near you soon? Are you aware that you cannot even get to Db2 13 FL511 if you have any of the specially announced “deprecated” items that we all have hanging around? Do you have a plan to get you out of this mess?
This session explains how you can find all the migration blockers that exist in your system and how to fix nearly all of them as well. It will also delve into VTAM/SNA and workfile usage to round off everything that can bite you!

This presentation will provide the ongoing success story Db2 z/OS Version 13 and covers the latest experiences with Db2 13 at Commerzbank AG. It will talk about some key important areas which are essential for the success and how to prevent some known avoidable pitfalls. We share the important latest experiences of the last 12 months, explains the upcoming and validated best practices in several key areas. This session will also dive into Function Level dependencies, maintenance aspects, some tooling dependencies, and some performance aspects as well as base utilities and system functionalities.

Data lakes have become a foundational component of modern data platforms, enabling organizations to store and process large volumes of structured, semi-structured, and unstructured data with high scalability and flexibility.
For data architects and database administrators, the challenge lies not only in designing a robust data lake architecture but also in ensuring consistent performance, governance, and operational reliability across diverse workloads.
A well-designed data lake architecture typically follows a layered approach, incorporating ingestion, storage, processing, metadata management, and access layers.
Data is ingested through batch processing and streaming pipelines into cost-effective, distributed storage systems, based on object storage.
Processing frameworks support transformation and enrichment, while metadata and catalog services provide schema management, lineage, and discoverability. Increasingly, modern architectures adopt lakehouse patterns to bridge the gap betwe

Db2 for z/OS offers advanced capabilities to strengthen security management in distributed environments. This session discusses best practices for establishing secure connections including protected ID authentication using SSL, IDT, or trusted connection. This session also reviews the key system parameters that govern distributed access and discusses how system profile tables can be leveraged to enforce granular connection controls and secure TCP/IP connectivity.

SQL injection remains one of the most damaging classes of flaws against data-driven applications—and the workflow around it has changed: security testers and attackers alike can pair classic tooling with generative AI to iterate payloads faster, interpret ambiguous responses, and explore injection chains with less manual trial and error. This session focuses on Db2-backed applications: how SQL injection manifests in practice, how to recognize fragile dynamic SQL and unsafe integration patterns, and how to prioritize prevention (parameterization, safe composition, and tight error handling). We will connect that baseline to today’s landscape—examples include AI-assisted DAST/exploration tools, AI-augmented automation around sqlmap, and red-team harnesses that probe whether LLM-driven apps avoid unsafe database access—so you leave with a clearer understanding of both defenses and new risks.This is an upgraded version of my session on IDUG EMEA 2022: SQL Injection and Db2 - Pathology and P

Db2 Connect Version 12, released in November 2024, introduces a wave of enhancements—alongside changes that may challenge existing practices. This session will guide you through the most impactful updates in Db2 Connect V12 and its subsequent fix packs from a Db2 for z/OS perspective. We’ll explore critical topics such as strengthened TLS encryption, licensing transformations, and emerging capabilities in monitoring and observability. Join us to understand not only what’s new, but how these changes can unlock new opportunities for performance, security, and operational insight.