SlideShare a Scribd company logo
Risk-based test techniques on
Agile projects
Anton Muzhailo, GlobalLogic Ukraine
About me
• ISTQB Certified Test Manager
• Provide ISTQB Certified Trainings in CodeSpace
• 300+ full course attendees during 4 years
/in/muzhailo
Anton Muzhailo
Lead Automation Engineer,
GlobalLogic
In other words I’m basically doing:
• Test Automation
• Performance Testing
• Test Management
• Consulting in domains above
• Teaching & Mentoring
Why testing fails on agile projects?
Priority
changes
1
Scope
changes
2
Unclear
requirements
3
And one
more thing…
4
You are not Agile
enough
Risk-based testing will help!
Risk
s
Test
estimation
Release
readiness
Test
scope
Testing
depth
Test
reduction
Test
prioritization
Quick reminder
Risk
characteristics
Impact Likelihood
Risk Level = Likelihood * Impact
Technical
stakeholders
Determine
Business
stakeholders
Determine
Risk-based vs Req-based
Feature Acceptance
Criteria 1
Feature Acceptance
Criteria 2
Test case 1
Test case 2
Test case 3
Test case 1
Test case 2
Test case 3
Risk1
Risk2
Risk3
Risk-based testing activities
Risk
identification
Risk
assessment
Risk
mitigation
Risk
management
Risk Identification Techniques
Independent
assessments
Project
retrospectives
Brainstorming
Checklists
Calling on past
experience
Risk Assessment
Determining the likelihood and impact for each risk
Evaluating or assigning other properties of each risk,
such as risk owner
Cutting down the risks we don’t care about
Risk Mitigation
Testing: Static and Dynamic
Risk Contingency
Accepting the risk
Risk Management
Techniques
Systematic Software Testing
Pragmatic Risk Analysis and
Management
Product RISk MAnagement Hazard Analysis
Cost of exposure Failure Mode and Effect Analysis
Quality Function Deployment Fault Tree Analysis
Process Decision Program Chart Event Tree Analysis
Systematic Software Testing
Forming a
Brainstorming
Team
Compile a
list of features
Determine
the likelihood
Determine
the Impact
Assign
numeric
values (RL)
Compute the
risk priority
Review/modify
the values
Prioritize the
features
Determine
the cut line
Consider
mitigation
1 2 3 4 5
6 7 8 9 10
Movie subscription system Likelihood Impact Risk
LevelFeatures Attributes
Change resolution 0.9 0.9 0.81
To be
tested
Play the movie 0.5 1 0.5
Performance 0.25 0.9 0.225
Security 0.25 0.25 0.125
Buy subscription 0.1 1 0.1
See
recommendations
0.9 0.25 0.225
Accepted
Create account 0.1 1 0.1 Not to be
tested
(or less)
Recover account 0.1 0.9 0.09
Usability 0.25 0.25 0.625
Hazard Analysis
Causes Hazard Consequences
Risk
Reduction
Strategies
Mitigation
actions
Safety
Requirements
Hazard Analysis
Risk Reduction
Hazard analysis techniques
include:
• Function Failure Analysis
• Event Tree Analysis
• Failure Modes and Effects
Analysis
• Fault Tree Analysis
• Cause-consequence Diagrams
• Hazard and Operability
Studies.
Cost of exposure. Risk exposure
Risk exposure (RE) = 2% * 80K = 1600
Risk Probability of
occurring
Total loss if it
occurs
Risk exposure
Product recall situation 2% 80K 1600
Significant product rejection 0.1% 100K 1000
Competitive strike 10% 25K 2500
Most serious risk
Cost of exposure. Risk Reduction Leverage
Risk
Probability of
occurring
Total loss if it
occurs
Risk
exposure
Competitive strike 10% 25K 2500
Countermeasure Total cost New risk
probability
New total loss New Risk
exposure
RRL
Advertising campaign 40K 3% 5K 150 0.059
Price promotions 30K 5% 10K 500 0.067
Simultaneous launch 10K 8% 15K 1200 0.13
Risk Reduction Leverage (RRL) = (2500 – 150) / 40000 = 0.059
Most cost-effective contermeasure
HVAC System
Temperature
sensor
MCU
Display
Heat System
Conditioning
System
Input
Failure Mode and Effect Analysis
Function or
Process Step
Failure
type
Potential
Impact
Seve
rity
Potential
Causes
Occur
rence
Detection
Mode
Detecta
bility
RPN
Temperature
sensor.
Measures
the
environment
temperature
Sensor
failure
Overheating
or constant
cooling
10 Wrong usage
environment,
old sensor,
poor sensor
quality
2 Subjective
temperature
measurement,
thermometer
4 80
Recommend
ed Actions
Responsibili
ty
Target
Date
Action taken Severity Occure
nce
Detecta
bility
RPN
Add extra
sensor as
duplicated
Engineering ASAP If difference between
sensors – shut down
the system
3 2 1 6
Quality Function Deployment
How to satisfy
customer wants
Relationships
Matrix
What the
customer wants
Target values
Technical evaluation
Competitive
assessment
Correlation
MatrixCustomer
Importance
ratings
Weighted
rating
• Customer focused
• Allows Competitor Analysis
• Development priorities
oriented on end-user needs
• Formal Validation
• Shows design flaws and
dependencies
Correlations:
Strong Positive
Positive
Strong Negative
Negative
+
+
_
_
Relationships:
Strongest= 10
Strong= 7
Fair= 4
Weak= 1
●●
●
•
https://youtu.be/u9bvzE5Qhjk
Fault Tree Analysis
• Displays all possible causes that leads to fault
• A fault can be replaced by risk
• If we know all possible causes of the risk – we
can remove or prevent them
Car hits an object
AND
Driver doesn’t see
the object
Car fails to break
OR OR
Driver
drunk
Object is
not visible
from car
Driver
asleep
Car
going
too fast
Weak
brakes
https://www.smartdraw.com/fault-tree/examples/fault-tree-example-vehicle-collision/
Wanna know more?
• Pragmatic Risk Analysis and Management
– https://rbcs-us.com/site/assets/files/1159/a-case-study-in-risk-based-testing.
pdf
• Product Risk Management:
– http://www.erikvanveenendaal.nl/NL/files/e-book%20PRISMA.pdf
• Fault Tree Analysis / Event Tree Analysis
– https://www.amazon.com/Fault-Analysis-Primer-Clifton-Ericson/dp/1466446
102
– https://www.amazon.com/Risk-Assessment-Tools-Techniques-Applications/d
p/047089203X
Q & A

More Related Content

Similar to Risk-Based Test Techniques

Mats Grindal - Risk-Based Testing - Details of Our Success
Mats Grindal - Risk-Based Testing - Details of Our Success Mats Grindal - Risk-Based Testing - Details of Our Success
Mats Grindal - Risk-Based Testing - Details of Our Success
TEST Huddle
 
Risk Management integrated pub
Risk Management integrated pubRisk Management integrated pub
Risk Management integrated pub
Manfred Walder
 
[Vu Van Nguyen] Value-based Software Testing an Approach to Prioritizing Tests
[Vu Van Nguyen]  Value-based Software Testing an Approach to Prioritizing Tests[Vu Van Nguyen]  Value-based Software Testing an Approach to Prioritizing Tests
[Vu Van Nguyen] Value-based Software Testing an Approach to Prioritizing Tests
Ho Chi Minh City Software Testing Club
 
Safety life cycle seminar IEC61511
Safety life cycle seminar IEC61511Safety life cycle seminar IEC61511
Safety life cycle seminar IEC61511
Luis Atencio
 
Arc flash August 2012 IE Aust JEEP
Arc flash  August 2012   IE Aust JEEPArc flash  August 2012   IE Aust JEEP
Arc flash August 2012 IE Aust JEEP
Engineers Australia
 
Volodymyr Prymakov and Vlada Benyukh Detailed manual estimation approach for ...
Volodymyr Prymakov and Vlada Benyukh Detailed manual estimation approach for ...Volodymyr Prymakov and Vlada Benyukh Detailed manual estimation approach for ...
Volodymyr Prymakov and Vlada Benyukh Detailed manual estimation approach for ...
Ievgenii Katsan
 
Risk based testing a new case study
Risk based testing   a new case studyRisk based testing   a new case study
Risk based testing a new case study
Bassam Al-Khatib
 
Generating ROI with Microbial Control
Generating ROI with Microbial ControlGenerating ROI with Microbial Control
Generating ROI with Microbial Control
LuminUltra Technologies Ltd.
 
Manual estimation approach for Pre-sale phase of a project
Manual estimation approach for Pre-sale phase of a projectManual estimation approach for Pre-sale phase of a project
Manual estimation approach for Pre-sale phase of a project
Vladimir Primakov (Volodymyr Prymakov)
 
Operational Excellence in Oil and Gas Loss Prevention
Operational Excellence in Oil and Gas Loss PreventionOperational Excellence in Oil and Gas Loss Prevention
Operational Excellence in Oil and Gas Loss Prevention
Michael Marshall, PE
 
Analytical Risk-based and Specification-based Testing - Bui Duy Tam
Analytical Risk-based and Specification-based Testing - Bui Duy TamAnalytical Risk-based and Specification-based Testing - Bui Duy Tam
Analytical Risk-based and Specification-based Testing - Bui Duy Tam
Ho Chi Minh City Software Testing Club
 
Six Sigma Overview
Six Sigma OverviewSix Sigma Overview
From testing to quality governance and problem resolution.pdf
From testing to quality governance and problem resolution.pdfFrom testing to quality governance and problem resolution.pdf
From testing to quality governance and problem resolution.pdf
Xavier Escudero Sabadell
 
Risk assessment and management
Risk assessment and managementRisk assessment and management
Risk assessment and management
TaekHyeun Kim
 
Risk Assessment and Management.ppt
Risk Assessment and Management.pptRisk Assessment and Management.ppt
Risk Assessment and Management.ppt
BasauKhator1
 
The Art of Testing Less without Sacrificing Quality @ ICSE 2015
The Art of Testing Less without Sacrificing Quality @ ICSE 2015The Art of Testing Less without Sacrificing Quality @ ICSE 2015
The Art of Testing Less without Sacrificing Quality @ ICSE 2015
Kim Herzig
 
Costof quality
Costof qualityCostof quality
Costof quality
Omnex Inc.
 
2010-03-31 - VU Amsterdam - Experiences testing safety critical systems
2010-03-31 - VU Amsterdam - Experiences testing safety critical systems2010-03-31 - VU Amsterdam - Experiences testing safety critical systems
2010-03-31 - VU Amsterdam - Experiences testing safety critical systems
Jaap van Ekris
 
Guidelines to Measuring Test Automation ROI
 Guidelines to Measuring Test Automation ROI Guidelines to Measuring Test Automation ROI
Guidelines to Measuring Test Automation ROI
Perfecto by Perforce
 
Th14 Balanced Testing Presentation
Th14   Balanced Testing   PresentationTh14   Balanced Testing   Presentation
Th14 Balanced Testing Presentation
Edwin Loon, van
 

Similar to Risk-Based Test Techniques (20)

Mats Grindal - Risk-Based Testing - Details of Our Success
Mats Grindal - Risk-Based Testing - Details of Our Success Mats Grindal - Risk-Based Testing - Details of Our Success
Mats Grindal - Risk-Based Testing - Details of Our Success
 
Risk Management integrated pub
Risk Management integrated pubRisk Management integrated pub
Risk Management integrated pub
 
[Vu Van Nguyen] Value-based Software Testing an Approach to Prioritizing Tests
[Vu Van Nguyen]  Value-based Software Testing an Approach to Prioritizing Tests[Vu Van Nguyen]  Value-based Software Testing an Approach to Prioritizing Tests
[Vu Van Nguyen] Value-based Software Testing an Approach to Prioritizing Tests
 
Safety life cycle seminar IEC61511
Safety life cycle seminar IEC61511Safety life cycle seminar IEC61511
Safety life cycle seminar IEC61511
 
Arc flash August 2012 IE Aust JEEP
Arc flash  August 2012   IE Aust JEEPArc flash  August 2012   IE Aust JEEP
Arc flash August 2012 IE Aust JEEP
 
Volodymyr Prymakov and Vlada Benyukh Detailed manual estimation approach for ...
Volodymyr Prymakov and Vlada Benyukh Detailed manual estimation approach for ...Volodymyr Prymakov and Vlada Benyukh Detailed manual estimation approach for ...
Volodymyr Prymakov and Vlada Benyukh Detailed manual estimation approach for ...
 
Risk based testing a new case study
Risk based testing   a new case studyRisk based testing   a new case study
Risk based testing a new case study
 
Generating ROI with Microbial Control
Generating ROI with Microbial ControlGenerating ROI with Microbial Control
Generating ROI with Microbial Control
 
Manual estimation approach for Pre-sale phase of a project
Manual estimation approach for Pre-sale phase of a projectManual estimation approach for Pre-sale phase of a project
Manual estimation approach for Pre-sale phase of a project
 
Operational Excellence in Oil and Gas Loss Prevention
Operational Excellence in Oil and Gas Loss PreventionOperational Excellence in Oil and Gas Loss Prevention
Operational Excellence in Oil and Gas Loss Prevention
 
Analytical Risk-based and Specification-based Testing - Bui Duy Tam
Analytical Risk-based and Specification-based Testing - Bui Duy TamAnalytical Risk-based and Specification-based Testing - Bui Duy Tam
Analytical Risk-based and Specification-based Testing - Bui Duy Tam
 
Six Sigma Overview
Six Sigma OverviewSix Sigma Overview
Six Sigma Overview
 
From testing to quality governance and problem resolution.pdf
From testing to quality governance and problem resolution.pdfFrom testing to quality governance and problem resolution.pdf
From testing to quality governance and problem resolution.pdf
 
Risk assessment and management
Risk assessment and managementRisk assessment and management
Risk assessment and management
 
Risk Assessment and Management.ppt
Risk Assessment and Management.pptRisk Assessment and Management.ppt
Risk Assessment and Management.ppt
 
The Art of Testing Less without Sacrificing Quality @ ICSE 2015
The Art of Testing Less without Sacrificing Quality @ ICSE 2015The Art of Testing Less without Sacrificing Quality @ ICSE 2015
The Art of Testing Less without Sacrificing Quality @ ICSE 2015
 
Costof quality
Costof qualityCostof quality
Costof quality
 
2010-03-31 - VU Amsterdam - Experiences testing safety critical systems
2010-03-31 - VU Amsterdam - Experiences testing safety critical systems2010-03-31 - VU Amsterdam - Experiences testing safety critical systems
2010-03-31 - VU Amsterdam - Experiences testing safety critical systems
 
Guidelines to Measuring Test Automation ROI
 Guidelines to Measuring Test Automation ROI Guidelines to Measuring Test Automation ROI
Guidelines to Measuring Test Automation ROI
 
Th14 Balanced Testing Presentation
Th14   Balanced Testing   PresentationTh14   Balanced Testing   Presentation
Th14 Balanced Testing Presentation
 

More from GlobalLogic Ukraine

GlobalLogic Embedded Community x ROS Ukraine Webinar "Surgical Robots"
GlobalLogic Embedded Community x ROS Ukraine Webinar "Surgical Robots"GlobalLogic Embedded Community x ROS Ukraine Webinar "Surgical Robots"
GlobalLogic Embedded Community x ROS Ukraine Webinar "Surgical Robots"
GlobalLogic Ukraine
 
GlobalLogic Java Community Webinar #17 “SpringJDBC vs JDBC. Is Spring a Hero?”
GlobalLogic Java Community Webinar #17 “SpringJDBC vs JDBC. Is Spring a Hero?”GlobalLogic Java Community Webinar #17 “SpringJDBC vs JDBC. Is Spring a Hero?”
GlobalLogic Java Community Webinar #17 “SpringJDBC vs JDBC. Is Spring a Hero?”
GlobalLogic Ukraine
 
GlobalLogic JavaScript Community Webinar #18 “Long Story Short: OSI Model”
GlobalLogic JavaScript Community Webinar #18 “Long Story Short: OSI Model”GlobalLogic JavaScript Community Webinar #18 “Long Story Short: OSI Model”
GlobalLogic JavaScript Community Webinar #18 “Long Story Short: OSI Model”
GlobalLogic Ukraine
 
Штучний інтелект як допомога в навчанні, а не замінник.pptx
Штучний інтелект як допомога в навчанні, а не замінник.pptxШтучний інтелект як допомога в навчанні, а не замінник.pptx
Штучний інтелект як допомога в навчанні, а не замінник.pptx
GlobalLogic Ukraine
 
Задачі AI-розробника як застосовується штучний інтелект.pptx
Задачі AI-розробника як застосовується штучний інтелект.pptxЗадачі AI-розробника як застосовується штучний інтелект.pptx
Задачі AI-розробника як застосовується штучний інтелект.pptx
GlobalLogic Ukraine
 
Що треба вивчати, щоб стати розробником штучного інтелекту та нейромереж.pptx
Що треба вивчати, щоб стати розробником штучного інтелекту та нейромереж.pptxЩо треба вивчати, щоб стати розробником штучного інтелекту та нейромереж.pptx
Що треба вивчати, щоб стати розробником штучного інтелекту та нейромереж.pptx
GlobalLogic Ukraine
 
GlobalLogic Java Community Webinar #16 “Zaloni’s Architecture for Data-Driven...
GlobalLogic Java Community Webinar #16 “Zaloni’s Architecture for Data-Driven...GlobalLogic Java Community Webinar #16 “Zaloni’s Architecture for Data-Driven...
GlobalLogic Java Community Webinar #16 “Zaloni’s Architecture for Data-Driven...
GlobalLogic Ukraine
 
JavaScript Community Webinar #14 "Why Is Git Rebase?"
JavaScript Community Webinar #14 "Why Is Git Rebase?"JavaScript Community Webinar #14 "Why Is Git Rebase?"
JavaScript Community Webinar #14 "Why Is Git Rebase?"
GlobalLogic Ukraine
 
GlobalLogic .NET Community Webinar #3 "Exploring Serverless with Azure Functi...
GlobalLogic .NET Community Webinar #3 "Exploring Serverless with Azure Functi...GlobalLogic .NET Community Webinar #3 "Exploring Serverless with Azure Functi...
GlobalLogic .NET Community Webinar #3 "Exploring Serverless with Azure Functi...
GlobalLogic Ukraine
 
Страх і сила помилок - IT Inside від GlobalLogic Education
Страх і сила помилок - IT Inside від GlobalLogic EducationСтрах і сила помилок - IT Inside від GlobalLogic Education
Страх і сила помилок - IT Inside від GlobalLogic Education
GlobalLogic Ukraine
 
GlobalLogic .NET Webinar #2 “Azure RBAC and Managed Identity”
GlobalLogic .NET Webinar #2 “Azure RBAC and Managed Identity”GlobalLogic .NET Webinar #2 “Azure RBAC and Managed Identity”
GlobalLogic .NET Webinar #2 “Azure RBAC and Managed Identity”
GlobalLogic Ukraine
 
GlobalLogic QA Webinar “What does it take to become a Test Engineer”
GlobalLogic QA Webinar “What does it take to become a Test Engineer”GlobalLogic QA Webinar “What does it take to become a Test Engineer”
GlobalLogic QA Webinar “What does it take to become a Test Engineer”
GlobalLogic Ukraine
 
“How to Secure Your Applications With a Keycloak?
“How to Secure Your Applications With a Keycloak?“How to Secure Your Applications With a Keycloak?
“How to Secure Your Applications With a Keycloak?
GlobalLogic Ukraine
 
GlobalLogic Machine Learning Webinar “Advanced Statistical Methods for Linear...
GlobalLogic Machine Learning Webinar “Advanced Statistical Methods for Linear...GlobalLogic Machine Learning Webinar “Advanced Statistical Methods for Linear...
GlobalLogic Machine Learning Webinar “Advanced Statistical Methods for Linear...
GlobalLogic Ukraine
 
GlobalLogic Machine Learning Webinar “Statistical learning of linear regressi...
GlobalLogic Machine Learning Webinar “Statistical learning of linear regressi...GlobalLogic Machine Learning Webinar “Statistical learning of linear regressi...
GlobalLogic Machine Learning Webinar “Statistical learning of linear regressi...
GlobalLogic Ukraine
 
GlobalLogic C++ Webinar “The Minimum Knowledge to Become a C++ Developer”
GlobalLogic C++ Webinar “The Minimum Knowledge to Become a C++ Developer”GlobalLogic C++ Webinar “The Minimum Knowledge to Become a C++ Developer”
GlobalLogic C++ Webinar “The Minimum Knowledge to Become a C++ Developer”
GlobalLogic Ukraine
 
Embedded Webinar #17 "Low-level Network Testing in Embedded Devices Development"
Embedded Webinar #17 "Low-level Network Testing in Embedded Devices Development"Embedded Webinar #17 "Low-level Network Testing in Embedded Devices Development"
Embedded Webinar #17 "Low-level Network Testing in Embedded Devices Development"
GlobalLogic Ukraine
 
GlobalLogic Webinar "Introduction to Embedded QA"
GlobalLogic Webinar "Introduction to Embedded QA"GlobalLogic Webinar "Introduction to Embedded QA"
GlobalLogic Webinar "Introduction to Embedded QA"
GlobalLogic Ukraine
 
C++ Webinar "Why Should You Learn C++ in 2021-22?"
C++ Webinar "Why Should You Learn C++ in 2021-22?"C++ Webinar "Why Should You Learn C++ in 2021-22?"
C++ Webinar "Why Should You Learn C++ in 2021-22?"
GlobalLogic Ukraine
 
GlobalLogic Test Automation Live Testing Session “Android Behind UI — Testing...
GlobalLogic Test Automation Live Testing Session “Android Behind UI — Testing...GlobalLogic Test Automation Live Testing Session “Android Behind UI — Testing...
GlobalLogic Test Automation Live Testing Session “Android Behind UI — Testing...
GlobalLogic Ukraine
 

More from GlobalLogic Ukraine (20)

GlobalLogic Embedded Community x ROS Ukraine Webinar "Surgical Robots"
GlobalLogic Embedded Community x ROS Ukraine Webinar "Surgical Robots"GlobalLogic Embedded Community x ROS Ukraine Webinar "Surgical Robots"
GlobalLogic Embedded Community x ROS Ukraine Webinar "Surgical Robots"
 
GlobalLogic Java Community Webinar #17 “SpringJDBC vs JDBC. Is Spring a Hero?”
GlobalLogic Java Community Webinar #17 “SpringJDBC vs JDBC. Is Spring a Hero?”GlobalLogic Java Community Webinar #17 “SpringJDBC vs JDBC. Is Spring a Hero?”
GlobalLogic Java Community Webinar #17 “SpringJDBC vs JDBC. Is Spring a Hero?”
 
GlobalLogic JavaScript Community Webinar #18 “Long Story Short: OSI Model”
GlobalLogic JavaScript Community Webinar #18 “Long Story Short: OSI Model”GlobalLogic JavaScript Community Webinar #18 “Long Story Short: OSI Model”
GlobalLogic JavaScript Community Webinar #18 “Long Story Short: OSI Model”
 
Штучний інтелект як допомога в навчанні, а не замінник.pptx
Штучний інтелект як допомога в навчанні, а не замінник.pptxШтучний інтелект як допомога в навчанні, а не замінник.pptx
Штучний інтелект як допомога в навчанні, а не замінник.pptx
 
Задачі AI-розробника як застосовується штучний інтелект.pptx
Задачі AI-розробника як застосовується штучний інтелект.pptxЗадачі AI-розробника як застосовується штучний інтелект.pptx
Задачі AI-розробника як застосовується штучний інтелект.pptx
 
Що треба вивчати, щоб стати розробником штучного інтелекту та нейромереж.pptx
Що треба вивчати, щоб стати розробником штучного інтелекту та нейромереж.pptxЩо треба вивчати, щоб стати розробником штучного інтелекту та нейромереж.pptx
Що треба вивчати, щоб стати розробником штучного інтелекту та нейромереж.pptx
 
GlobalLogic Java Community Webinar #16 “Zaloni’s Architecture for Data-Driven...
GlobalLogic Java Community Webinar #16 “Zaloni’s Architecture for Data-Driven...GlobalLogic Java Community Webinar #16 “Zaloni’s Architecture for Data-Driven...
GlobalLogic Java Community Webinar #16 “Zaloni’s Architecture for Data-Driven...
 
JavaScript Community Webinar #14 "Why Is Git Rebase?"
JavaScript Community Webinar #14 "Why Is Git Rebase?"JavaScript Community Webinar #14 "Why Is Git Rebase?"
JavaScript Community Webinar #14 "Why Is Git Rebase?"
 
GlobalLogic .NET Community Webinar #3 "Exploring Serverless with Azure Functi...
GlobalLogic .NET Community Webinar #3 "Exploring Serverless with Azure Functi...GlobalLogic .NET Community Webinar #3 "Exploring Serverless with Azure Functi...
GlobalLogic .NET Community Webinar #3 "Exploring Serverless with Azure Functi...
 
Страх і сила помилок - IT Inside від GlobalLogic Education
Страх і сила помилок - IT Inside від GlobalLogic EducationСтрах і сила помилок - IT Inside від GlobalLogic Education
Страх і сила помилок - IT Inside від GlobalLogic Education
 
GlobalLogic .NET Webinar #2 “Azure RBAC and Managed Identity”
GlobalLogic .NET Webinar #2 “Azure RBAC and Managed Identity”GlobalLogic .NET Webinar #2 “Azure RBAC and Managed Identity”
GlobalLogic .NET Webinar #2 “Azure RBAC and Managed Identity”
 
GlobalLogic QA Webinar “What does it take to become a Test Engineer”
GlobalLogic QA Webinar “What does it take to become a Test Engineer”GlobalLogic QA Webinar “What does it take to become a Test Engineer”
GlobalLogic QA Webinar “What does it take to become a Test Engineer”
 
“How to Secure Your Applications With a Keycloak?
“How to Secure Your Applications With a Keycloak?“How to Secure Your Applications With a Keycloak?
“How to Secure Your Applications With a Keycloak?
 
GlobalLogic Machine Learning Webinar “Advanced Statistical Methods for Linear...
GlobalLogic Machine Learning Webinar “Advanced Statistical Methods for Linear...GlobalLogic Machine Learning Webinar “Advanced Statistical Methods for Linear...
GlobalLogic Machine Learning Webinar “Advanced Statistical Methods for Linear...
 
GlobalLogic Machine Learning Webinar “Statistical learning of linear regressi...
GlobalLogic Machine Learning Webinar “Statistical learning of linear regressi...GlobalLogic Machine Learning Webinar “Statistical learning of linear regressi...
GlobalLogic Machine Learning Webinar “Statistical learning of linear regressi...
 
GlobalLogic C++ Webinar “The Minimum Knowledge to Become a C++ Developer”
GlobalLogic C++ Webinar “The Minimum Knowledge to Become a C++ Developer”GlobalLogic C++ Webinar “The Minimum Knowledge to Become a C++ Developer”
GlobalLogic C++ Webinar “The Minimum Knowledge to Become a C++ Developer”
 
Embedded Webinar #17 "Low-level Network Testing in Embedded Devices Development"
Embedded Webinar #17 "Low-level Network Testing in Embedded Devices Development"Embedded Webinar #17 "Low-level Network Testing in Embedded Devices Development"
Embedded Webinar #17 "Low-level Network Testing in Embedded Devices Development"
 
GlobalLogic Webinar "Introduction to Embedded QA"
GlobalLogic Webinar "Introduction to Embedded QA"GlobalLogic Webinar "Introduction to Embedded QA"
GlobalLogic Webinar "Introduction to Embedded QA"
 
C++ Webinar "Why Should You Learn C++ in 2021-22?"
C++ Webinar "Why Should You Learn C++ in 2021-22?"C++ Webinar "Why Should You Learn C++ in 2021-22?"
C++ Webinar "Why Should You Learn C++ in 2021-22?"
 
GlobalLogic Test Automation Live Testing Session “Android Behind UI — Testing...
GlobalLogic Test Automation Live Testing Session “Android Behind UI — Testing...GlobalLogic Test Automation Live Testing Session “Android Behind UI — Testing...
GlobalLogic Test Automation Live Testing Session “Android Behind UI — Testing...
 

Recently uploaded

20240609 QFM020 Irresponsible AI Reading List May 2024
20240609 QFM020 Irresponsible AI Reading List May 202420240609 QFM020 Irresponsible AI Reading List May 2024
20240609 QFM020 Irresponsible AI Reading List May 2024
Matthew Sinclair
 
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024Encryption in Microsoft 365 - ExpertsLive Netherlands 2024
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024
Albert Hoitingh
 
20240605 QFM017 Machine Intelligence Reading List May 2024
20240605 QFM017 Machine Intelligence Reading List May 202420240605 QFM017 Machine Intelligence Reading List May 2024
20240605 QFM017 Machine Intelligence Reading List May 2024
Matthew Sinclair
 
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...
James Anderson
 
Securing your Kubernetes cluster_ a step-by-step guide to success !
Securing your Kubernetes cluster_ a step-by-step guide to success !Securing your Kubernetes cluster_ a step-by-step guide to success !
Securing your Kubernetes cluster_ a step-by-step guide to success !
KatiaHIMEUR1
 
GraphSummit Singapore | Enhancing Changi Airport Group's Passenger Experience...
GraphSummit Singapore | Enhancing Changi Airport Group's Passenger Experience...GraphSummit Singapore | Enhancing Changi Airport Group's Passenger Experience...
GraphSummit Singapore | Enhancing Changi Airport Group's Passenger Experience...
Neo4j
 
みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...
みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...
みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...
名前 です男
 
Mind map of terminologies used in context of Generative AI
Mind map of terminologies used in context of Generative AIMind map of terminologies used in context of Generative AI
Mind map of terminologies used in context of Generative AI
Kumud Singh
 
Enchancing adoption of Open Source Libraries. A case study on Albumentations.AI
Enchancing adoption of Open Source Libraries. A case study on Albumentations.AIEnchancing adoption of Open Source Libraries. A case study on Albumentations.AI
Enchancing adoption of Open Source Libraries. A case study on Albumentations.AI
Vladimir Iglovikov, Ph.D.
 
Large Language Model (LLM) and it’s Geospatial Applications
Large Language Model (LLM) and it’s Geospatial ApplicationsLarge Language Model (LLM) and it’s Geospatial Applications
Large Language Model (LLM) and it’s Geospatial Applications
Rohit Gautam
 
Data structures and Algorithms in Python.pdf
Data structures and Algorithms in Python.pdfData structures and Algorithms in Python.pdf
Data structures and Algorithms in Python.pdf
TIPNGVN2
 
By Design, not by Accident - Agile Venture Bolzano 2024
By Design, not by Accident - Agile Venture Bolzano 2024By Design, not by Accident - Agile Venture Bolzano 2024
By Design, not by Accident - Agile Venture Bolzano 2024
Pierluigi Pugliese
 
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
SOFTTECHHUB
 
zkStudyClub - Reef: Fast Succinct Non-Interactive Zero-Knowledge Regex Proofs
zkStudyClub - Reef: Fast Succinct Non-Interactive Zero-Knowledge Regex ProofszkStudyClub - Reef: Fast Succinct Non-Interactive Zero-Knowledge Regex Proofs
zkStudyClub - Reef: Fast Succinct Non-Interactive Zero-Knowledge Regex Proofs
Alex Pruden
 
“I’m still / I’m still / Chaining from the Block”
“I’m still / I’m still / Chaining from the Block”“I’m still / I’m still / Chaining from the Block”
“I’m still / I’m still / Chaining from the Block”
Claudio Di Ciccio
 
A tale of scale & speed: How the US Navy is enabling software delivery from l...
A tale of scale & speed: How the US Navy is enabling software delivery from l...A tale of scale & speed: How the US Navy is enabling software delivery from l...
A tale of scale & speed: How the US Navy is enabling software delivery from l...
sonjaschweigert1
 
FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf
FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdfFIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf
FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf
FIDO Alliance
 
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdfUnlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Malak Abu Hammad
 
Epistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI supportEpistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI support
Alan Dix
 
How to Get CNIC Information System with Paksim Ga.pptx
How to Get CNIC Information System with Paksim Ga.pptxHow to Get CNIC Information System with Paksim Ga.pptx
How to Get CNIC Information System with Paksim Ga.pptx
danishmna97
 

Recently uploaded (20)

20240609 QFM020 Irresponsible AI Reading List May 2024
20240609 QFM020 Irresponsible AI Reading List May 202420240609 QFM020 Irresponsible AI Reading List May 2024
20240609 QFM020 Irresponsible AI Reading List May 2024
 
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024Encryption in Microsoft 365 - ExpertsLive Netherlands 2024
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024
 
20240605 QFM017 Machine Intelligence Reading List May 2024
20240605 QFM017 Machine Intelligence Reading List May 202420240605 QFM017 Machine Intelligence Reading List May 2024
20240605 QFM017 Machine Intelligence Reading List May 2024
 
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...
 
Securing your Kubernetes cluster_ a step-by-step guide to success !
Securing your Kubernetes cluster_ a step-by-step guide to success !Securing your Kubernetes cluster_ a step-by-step guide to success !
Securing your Kubernetes cluster_ a step-by-step guide to success !
 
GraphSummit Singapore | Enhancing Changi Airport Group's Passenger Experience...
GraphSummit Singapore | Enhancing Changi Airport Group's Passenger Experience...GraphSummit Singapore | Enhancing Changi Airport Group's Passenger Experience...
GraphSummit Singapore | Enhancing Changi Airport Group's Passenger Experience...
 
みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...
みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...
みなさんこんにちはこれ何文字まで入るの?40文字以下不可とか本当に意味わからないけどこれ限界文字数書いてないからマジでやばい文字数いけるんじゃないの?えこ...
 
Mind map of terminologies used in context of Generative AI
Mind map of terminologies used in context of Generative AIMind map of terminologies used in context of Generative AI
Mind map of terminologies used in context of Generative AI
 
Enchancing adoption of Open Source Libraries. A case study on Albumentations.AI
Enchancing adoption of Open Source Libraries. A case study on Albumentations.AIEnchancing adoption of Open Source Libraries. A case study on Albumentations.AI
Enchancing adoption of Open Source Libraries. A case study on Albumentations.AI
 
Large Language Model (LLM) and it’s Geospatial Applications
Large Language Model (LLM) and it’s Geospatial ApplicationsLarge Language Model (LLM) and it’s Geospatial Applications
Large Language Model (LLM) and it’s Geospatial Applications
 
Data structures and Algorithms in Python.pdf
Data structures and Algorithms in Python.pdfData structures and Algorithms in Python.pdf
Data structures and Algorithms in Python.pdf
 
By Design, not by Accident - Agile Venture Bolzano 2024
By Design, not by Accident - Agile Venture Bolzano 2024By Design, not by Accident - Agile Venture Bolzano 2024
By Design, not by Accident - Agile Venture Bolzano 2024
 
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
 
zkStudyClub - Reef: Fast Succinct Non-Interactive Zero-Knowledge Regex Proofs
zkStudyClub - Reef: Fast Succinct Non-Interactive Zero-Knowledge Regex ProofszkStudyClub - Reef: Fast Succinct Non-Interactive Zero-Knowledge Regex Proofs
zkStudyClub - Reef: Fast Succinct Non-Interactive Zero-Knowledge Regex Proofs
 
“I’m still / I’m still / Chaining from the Block”
“I’m still / I’m still / Chaining from the Block”“I’m still / I’m still / Chaining from the Block”
“I’m still / I’m still / Chaining from the Block”
 
A tale of scale & speed: How the US Navy is enabling software delivery from l...
A tale of scale & speed: How the US Navy is enabling software delivery from l...A tale of scale & speed: How the US Navy is enabling software delivery from l...
A tale of scale & speed: How the US Navy is enabling software delivery from l...
 
FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf
FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdfFIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf
FIDO Alliance Osaka Seminar: The WebAuthn API and Discoverable Credentials.pdf
 
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdfUnlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
Unlock the Future of Search with MongoDB Atlas_ Vector Search Unleashed.pdf
 
Epistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI supportEpistemic Interaction - tuning interfaces to provide information for AI support
Epistemic Interaction - tuning interfaces to provide information for AI support
 
How to Get CNIC Information System with Paksim Ga.pptx
How to Get CNIC Information System with Paksim Ga.pptxHow to Get CNIC Information System with Paksim Ga.pptx
How to Get CNIC Information System with Paksim Ga.pptx
 

Risk-Based Test Techniques

  • 1. Risk-based test techniques on Agile projects Anton Muzhailo, GlobalLogic Ukraine
  • 2. About me • ISTQB Certified Test Manager • Provide ISTQB Certified Trainings in CodeSpace • 300+ full course attendees during 4 years /in/muzhailo Anton Muzhailo Lead Automation Engineer, GlobalLogic In other words I’m basically doing: • Test Automation • Performance Testing • Test Management • Consulting in domains above • Teaching & Mentoring
  • 3. Why testing fails on agile projects? Priority changes 1 Scope changes 2 Unclear requirements 3 And one more thing… 4 You are not Agile enough
  • 4. Risk-based testing will help! Risk s Test estimation Release readiness Test scope Testing depth Test reduction Test prioritization
  • 5. Quick reminder Risk characteristics Impact Likelihood Risk Level = Likelihood * Impact Technical stakeholders Determine Business stakeholders Determine
  • 6. Risk-based vs Req-based Feature Acceptance Criteria 1 Feature Acceptance Criteria 2 Test case 1 Test case 2 Test case 3 Test case 1 Test case 2 Test case 3 Risk1 Risk2 Risk3
  • 9. Risk Assessment Determining the likelihood and impact for each risk Evaluating or assigning other properties of each risk, such as risk owner Cutting down the risks we don’t care about
  • 10. Risk Mitigation Testing: Static and Dynamic Risk Contingency Accepting the risk
  • 11. Risk Management Techniques Systematic Software Testing Pragmatic Risk Analysis and Management Product RISk MAnagement Hazard Analysis Cost of exposure Failure Mode and Effect Analysis Quality Function Deployment Fault Tree Analysis Process Decision Program Chart Event Tree Analysis
  • 12. Systematic Software Testing Forming a Brainstorming Team Compile a list of features Determine the likelihood Determine the Impact Assign numeric values (RL) Compute the risk priority Review/modify the values Prioritize the features Determine the cut line Consider mitigation 1 2 3 4 5 6 7 8 9 10
  • 13. Movie subscription system Likelihood Impact Risk LevelFeatures Attributes Change resolution 0.9 0.9 0.81 To be tested Play the movie 0.5 1 0.5 Performance 0.25 0.9 0.225 Security 0.25 0.25 0.125 Buy subscription 0.1 1 0.1 See recommendations 0.9 0.25 0.225 Accepted Create account 0.1 1 0.1 Not to be tested (or less) Recover account 0.1 0.9 0.09 Usability 0.25 0.25 0.625
  • 14. Hazard Analysis Causes Hazard Consequences Risk Reduction Strategies Mitigation actions Safety Requirements Hazard Analysis Risk Reduction Hazard analysis techniques include: • Function Failure Analysis • Event Tree Analysis • Failure Modes and Effects Analysis • Fault Tree Analysis • Cause-consequence Diagrams • Hazard and Operability Studies.
  • 15. Cost of exposure. Risk exposure Risk exposure (RE) = 2% * 80K = 1600 Risk Probability of occurring Total loss if it occurs Risk exposure Product recall situation 2% 80K 1600 Significant product rejection 0.1% 100K 1000 Competitive strike 10% 25K 2500 Most serious risk
  • 16. Cost of exposure. Risk Reduction Leverage Risk Probability of occurring Total loss if it occurs Risk exposure Competitive strike 10% 25K 2500 Countermeasure Total cost New risk probability New total loss New Risk exposure RRL Advertising campaign 40K 3% 5K 150 0.059 Price promotions 30K 5% 10K 500 0.067 Simultaneous launch 10K 8% 15K 1200 0.13 Risk Reduction Leverage (RRL) = (2500 – 150) / 40000 = 0.059 Most cost-effective contermeasure
  • 18. Failure Mode and Effect Analysis Function or Process Step Failure type Potential Impact Seve rity Potential Causes Occur rence Detection Mode Detecta bility RPN Temperature sensor. Measures the environment temperature Sensor failure Overheating or constant cooling 10 Wrong usage environment, old sensor, poor sensor quality 2 Subjective temperature measurement, thermometer 4 80 Recommend ed Actions Responsibili ty Target Date Action taken Severity Occure nce Detecta bility RPN Add extra sensor as duplicated Engineering ASAP If difference between sensors – shut down the system 3 2 1 6
  • 19. Quality Function Deployment How to satisfy customer wants Relationships Matrix What the customer wants Target values Technical evaluation Competitive assessment Correlation MatrixCustomer Importance ratings Weighted rating • Customer focused • Allows Competitor Analysis • Development priorities oriented on end-user needs • Formal Validation • Shows design flaws and dependencies
  • 20. Correlations: Strong Positive Positive Strong Negative Negative + + _ _ Relationships: Strongest= 10 Strong= 7 Fair= 4 Weak= 1 ●● ● • https://youtu.be/u9bvzE5Qhjk
  • 21. Fault Tree Analysis • Displays all possible causes that leads to fault • A fault can be replaced by risk • If we know all possible causes of the risk – we can remove or prevent them
  • 22. Car hits an object AND Driver doesn’t see the object Car fails to break OR OR Driver drunk Object is not visible from car Driver asleep Car going too fast Weak brakes https://www.smartdraw.com/fault-tree/examples/fault-tree-example-vehicle-collision/
  • 23. Wanna know more? • Pragmatic Risk Analysis and Management – https://rbcs-us.com/site/assets/files/1159/a-case-study-in-risk-based-testing. pdf • Product Risk Management: – http://www.erikvanveenendaal.nl/NL/files/e-book%20PRISMA.pdf • Fault Tree Analysis / Event Tree Analysis – https://www.amazon.com/Fault-Analysis-Primer-Clifton-Ericson/dp/1466446 102 – https://www.amazon.com/Risk-Assessment-Tools-Techniques-Applications/d p/047089203X
  • 24. Q & A