5.2.Risk Management Flashcards
How is risk defined in testing?
A potential event, hazard, threat, or situation whose occurrence can cause an adverse effect, characterized by its likelihood and impact.
What are the main activities in risk management?
Risk analysis (identification and assessment) and risk control (mitigation and monitoring).
What is risk-based testing?
A test approach where test activities are selected, prioritized, and managed based on risk analysis and control.
How is risk level expressed and what does a higher risk level indicate?
Risk level is expressed by the likelihood and impact of the risk. A higher risk level indicates a greater need for treatment.
What are project risks in software testing?
Risks related to the management and control of the project, such as organizational, people, technical, and supplier issues.
Give examples of project risks.
Organizational issues (delays, inaccurate estimates, cost-cutting)
people issues (insufficient skills, conflicts, communication problems)
technical issues (scope creep, poor tool support)
supplier issues (third-party delivery failure).
What can project risks affect?
They can impact the project schedule, budget, or scope, affecting the project’s ability to achieve its objectives.
What are product risks in software testing?
Risks related to product quality characteristics, such as missing functionality, incorrect calculations, runtime errors, poor architecture, security vulnerabilities, and poor user experience.
What are some potential consequences of product risks?
User dissatisfaction, loss of revenue/trust/reputation, damage to third parties, high maintenance costs, criminal penalties, and in extreme cases, physical damage or injuries.
What is the goal of product risk analysis in testing?
To provide awareness of product risk to focus testing efforts and minimize residual product risk.
What techniques are used for risk identification?
Brainstorming, workshops, interviews, and cause-effect diagrams.
What does risk assessment involve?
Categorization of risks, determining their likelihood and impact, prioritizing risks, and proposing ways to handle them.
How do quantitative and qualitative approaches to risk assessment differ?
Quantitative calculates risk level as the multiplication of likelihood and impact, while qualitative uses a risk matrix to determine risk level.
How does product risk analysis influence testing?
It determines the scope of testing, test levels, test types, test techniques, coverage, test effort, and prioritization of testing.
What does product risk control involve?
Risk mitigation and risk monitoring to reduce risk levels and ensure the effectiveness of mitigation actions.
