Foundation Level 5 Flashcards
Defect Management
- the reported anomalies may turn out to be real defects or something else
- Anomalies may be reported during any phase of the SDLC
At a minimum, the defect management process includes
- a workflow for handling individual anomalies from their discovery to their closure
- rules for their classification
- activities to log the reported anomalies
- decide on a suitable response such as to fix or keep it as it is and finally to close the defect report
Typical defect reports have the following objectives:
- Provide those responsible for handling and resolving reported defects with sufficient information to resolve the issue
- Provide a means of tracking the quality of the work product
- Provide ideas for improvement of the development and test process
A defect report logged during dynamic testing typically includes:
- Unique identifier
- Title with a short summary of the anomaly being reported
- Date when the anomaly was observed, issuing organization, and author, including their role
- Identification of the test object and test environment
- Context of the defect (e.g., test case being run, test activity being performed, SDLC phase, and other relevant information such as the test technique, checklist or test data being used)
- Description of the failure to enable reproduction and resolution including the steps that detected the anomaly, and any relevant test logs, database dumps, screenshots, or recordings
- Expected results and actual results
- Severity of the defect (degree of impact) on the interests of stakeholders or requirements
- Priority to fix
- Status of the defect (e.g., open, deferred, duplicate, waiting to be fixed, awaiting confirmation testing, re-opened, closed, rejected)
- References (e.g., to the test case)
Configuration Management
provides a discipline for identifying, controlling, and tracking work products such as test plans, test strategies, test conditions, test cases, test scripts, test results, test logs, and test reports as configuration items.
NB Configuration management keeps a record of changed configuration items when a new baseline is created.
To properly support testing, CM ensures the following
- All configuration items, including test items (individual parts of the test object), are uniquely identified, version controlled, tracked for changes, and related to other configuration items so that traceability can be maintained throughout the test process
- All identified documentation and software items are referenced unambiguously in test documentation
The main risk management activities are:
- Risk analysis
- Risk control
Risk-based testing
The test approach, in which test activities are selected, prioritized, and managed based on risk analysis and risk control
Risk attributes
- Risk likelihood – the probability of the risk occurrence
- Risk impact (harm) – the consequences of this occurrence
Main types of risk in software testing
- project risks
- product risks
Project risks
- related to the management and control of the project
- may have an impact on the project schedule, budget or scope, which affects the project’s ability to achieve its objectives.
Project risk examples
- Organizational issues
- People issues (e.g., insufficient skills, conflicts, communication problems, shortage of staff)
- Technical issues (e.g., scope creep, poor tool support)
- Supplier issues (e.g., third-party delivery failure, bankruptcy of the supporting company)
Product risks
related to the product quality characteristics
Product risks examples
- missing or wrong functionality
- incorrect calculations
- runtime errors
- poor architecture
- inefficient algorithms
- inadequate response time
- poor user experience
- security vulnerabilities
Product risks may result in
- User dissatisfaction
- Loss of revenue, trust, reputation
- Damage to third parties
- High maintenance costs, overload of the helpdesk
- Criminal penalties
- In extreme cases, physical damage, injuries or even death
Product Risk Analysis
provide an awareness of product risk in order to focus the testing effort in a way that minimizes the residual level of product risk.
Product risk analysis consists of
- risk identification
- risk assessment
Product risk analysis may
- Determine the scope of testing to be carried out
- Determine the particular test levels and propose test types to be performed
- Determine the test techniques to be employed and the coverage to be achieved
- Estimate the test effort required for each task
- Prioritize testing in an attempt to find the critical defects as early as possible
- Determine whether any activities in addition to testing could be employed to reduce risk
Risk identification
generating a comprehensive list of risks
Risk assessment
- categorization of identified risks
- determining their risk likelihood
- risk impact and level, prioritizing
- proposing ways to handle them