Knowledge is Power

Sitewide Search

Search Bare Metal Cyber

Search exact control and technique identifiers, Cyber Wiki articles, framework records, playbooks, books, podcasts, Academy courses, individual lessons, and BMC Cyber Challenge activities.

Change managementIntermediate

Database Schema Change Control

Database schema change control governs how tables, fields, constraints, indexes, and dependent code are proposed, tested, deployed, and reversed.

What it means

Database schema change control governs how tables, fields, constraints, indexes, and dependent code are proposed, tested, deployed, and reversed.

Why it matters

A small schema change can break applications, alter meaning, invalidate reports, expose data, or create an irreversible migration under production load.

Practical focus

  • Define the scope, owners, acceptable risk, and required outcome for database schema change control before choosing a tool or platform feature
  • Implement versioned migrations, impact analysis, compatibility tests, staged deployment, backups, approvals, and rollback plans through documented, reviewable configuration and change control
  • Collect migration history, test results, dependent-object inventories, performance changes, and rollback readiness and compare the results with approved baselines, service objectives, and policy requirements
  • Exercise a schema migration partially applying, exceeding its maintenance window, or breaking a downstream dependency as a planned test case, including detection, containment, rollback, escalation, and evidence retention

Common mistakes

  • Treating database schema change control as a one-time technical setting instead of an operating control with owners and review cycles
  • Using default thresholds or broad exceptions without connecting them to business, privacy, security, and availability requirements
  • Keeping evidence in disconnected tools so reviewers cannot reconstruct who changed what, why it changed, or whether it worked
  • Testing only the normal path and discovering during an incident that a schema migration partially applying, exceeding its maintenance window, or breaking a downstream dependency was never rehearsed

Certification relevance

This subject appears in or supports the following certification bodies of knowledge:

CompTIA DataSys+CompTIA Data+CompTIA DataX

Authoritative sources