SlideShare a Scribd company logo
There’s No Time to Test
Can’t You Just Automate It?
A Guide to Managing Test Strategy from a Risk Based Perspective
Anna Heiermann – Senior Quality Analyst Consultant - HMB
QA Career started 10 years
ago
Found career by accident
Senior Consultant with
HMB
Married, 2 Dogs
Interested in Finding Ways
to Manage Stress
90%
70%
96%
98%
Stress Management Scale
Powerlifting
Family/Puppies/Friends
Music
Risk Management
Anna Heiermann
About Me
The Worst Bug
The Worst Bug I Didn’t Catch
• Worst Event in client history
• Requested to build a site with a product form in one day
• Bug: Form was not saving a very critical field in several cases
• Successful submit followed by going back to form using back browser button
• Result: Thousands of impacted forms did not contain most critical piece of
information
Aftermath
• Lots of “Lessons Learned”
• Unable to shake off the impacts of what happened with what wasn’t caught
• Worried about missing something very critical for several projects to come
• Easily overwhelmed with what was not in my control
No Communication of Test Coverage to
Client, No Test Strategy
Little Release Management
No Risk Based Discussions
What Happened?
5
Software
Disasters
Unfortunate Defects with Consequences
6
Deadly Miss – 6/11/2000
Radiation Therapy Software : Data entry miscalculation when
entering beam block data and interpreting beam block data
caused overexposure
No malfunction, but data caused overexposure
• Lack of requirements (procedures)
• Lack of testing
Result: FDA Statement 2017
• 28 patients overexposed
• 20-100 percent over prescribed dose
• 9 patients died, 5 confirmed radiation overexposure
• Remaining patients expected to develop complications
https://www.fda.gov/Radiation-
EmittingProducts/RadiationSafety/AlertsandNotices/ucm116533.
htm
7
The Age of Airline Outages
British Airways - 2017
• Systems failure impacted check-in and operational systems
• All flights out of Heathrow cancelled for days til resolved
Delta – 2016, 2017
• Electrical component failure led to transformer shutdown
• Transformer provided power to data center, servers weren’t connected
• Lost 100 million in Revenue, suffered same glitch a few months later
United Airlines – 2017
• “Computer problem” grounded hundreds of flights causing delays –
several disruptions from June - October
Southwest - 2017
• 2000 flights canceled after failed network router outage
https://www.reuters.com/article/us-ual-flights/united-flights-delayed-
after-computer-glitch-grounds-u-s-planes-idUSKBN15705C
https://www.npr.org/sections/thetwo-way/2017/05/29/530587512/on-
day-3-of-cancellation-chaos-british-airways-edges-closer-to-recovery
https://www.cnbc.com/2017/05/27/british-airways-says-computer-
outage-causing-global-delays.html
8
Starbucks Goes Dark - 2017
Cause: Overnight store register technology update caused store
outages in Canada and US
• Many stores closed
• A few stores only offered drip coffee and took cash
• Some handed out free cups of coffee
Result: Starbucks Survives, lost revenue
• Unexpected outage caused no revenue for several hours
• Free coffee – At least customers will return as some stores
tried to make it right
• Still under investigation – exposure of scammers finding ways
to get into Starbuck Customer accounts and drain balances
http://fortune.com/2017/05/16/starbucks-computers/
Risk Based Testing ISQTB Definition
An approach to testing to reduce the level of product risks and
inform stakeholders of their status, starting in the initial stages of a
project.
It involves the identification of product risks and the use of risk
levels to guide the test process
Reference Page 54
https://www.istqb.org/downloads/send/2-foundation-level-documents/3-foundation-level-syllabus-2011.html4
Benefits of Risk Based Testing
Collaboration on Strategy and Approach with QA, the Project
Team, and client
Client gains more education and awareness on high priority and
critical items from a technical and business perspective
Better trust/confidence with product quality and QA Team
Potential to help save/meet budget or time restraints
Risk Based Testing
“Well, the code broke and we’re not sure of
what the fix has impacted, so you’ll have to
test everything”
• Panama Radiation Incident
• “Changes” no matter how big or small still can cause catastrophic consequences if testing is not a part of the change
• Risk Based Management with a Risk Based Test approach is a MUST even if the change is a last minute “quick” thing
• Airlines
• Culprits may be presented with the hardware, but affect the software.
• Planning testing from a Risk perspective around outages can verify whether/not the software will withstand the glitch
• Starbucks
• Not life or death, but outages are lost revenue and more expensive to fix and test in production
• “Change” to existing products are just as critical to test as a brand new application
• “Changes” with a Risk Based Test approach will increase the ability to identify critical defects
• RBT encourages the entire team to think critically to identify what should be tested first
• My Worst Bug
• Should have had a better understanding of the functionality behind the scenes
• Better tests specifically around the behavior of the form with navigation would have increased the chance the defect would
have been caught
• Business would have had more involvement and visibility in our testing process
• Risk Based Strategy would increase overall client/dev team communication and increased collaboration on what to test
W h a t w e c a n l e a r n f r o m :
Lessons Learned
11
v
Venting Sessions: At the Bar
Product Knowledge
How well do you know
what you’re testing?
Do you RAM?
Do you use a Risk
Assessment Matrix to
determine the probability
of high risk areas and
discuss these with your
team as you plan?
Communication
What’s your test approach?
Who is helping you? Is
your team and client
onboard?
Execution
What are the state of your
Risk BasedTestcases? Are
you maintaining
traceability? Do you use
RBT for every level of
testing?
RBT Tip #1: Know the Code
In order to Better Understand Your Product
Sit down with the senior developer/lead tech to understand both
front end and back end functionality. Benefit – Better test cases
and test strategy approach.
Assess and determine what aspects behind the scenes share the
same code.
Understanding the way a product is coded will help uncover
potential high risk items that have shared code and allow for
better timing around when something should be tested.
The Challenge
Continuous deployments with new templates caused testing to be
overwhelmed with a high number of pages to validate content, images,
browser testing, etc. Functionality was equal if not lower priority as a
result.
CMS Session enabled QA to reprioritize what
was critical than what they assumed was
critical and decreased test time for shared
features/pages
No Understanding into what CMS was
Too many repeat test cases to test all pages
using same features and templates
CMS and RBT
Risk Based Testing against CMS and Site Redesign
Ý
RBT Tip #2: Build a RAM
In order to PRIORITIZE RISK
RAM = RISK ASSESSMENT MATRIX
Meet with Product Owner/client, development team and
determine all critical aspects of the application
Prioritize the most critical aspects that are to be tested first.
What’s most important to your dev team and your client?
The Challenge
Tech Debt card was originally prioritized as a “low
impacting” change. However, the way it was implemented
had an impact on every single table the team had coded
from the beginning of a project.
RAM designed with Business and Dev team to
assess most critical pieces of data. Matrix
helped identify these and then the entire team
helped in testing these areas to meet timeline.
“T” Shaped Team!
Short timeline to deployment, not
enough QA Resources
Too many test cases in regression bed that
wouldn’t cover all the critical concerns from
the change
Creating a RAM
Risk Based Testing using Risk Assessment Matrix
Ý
D
E
E
P
BROAD
Able to apply knowledge across situations
Functional/SpecificSkillSet
RBT Tip #3: Communicate the Plan
In order to Set Test Scope and Expectation
Build a Test Approach defining the test coverage that will be
provided based on the outcome of the RAM session.
List out testing types that will be done and others that will not
(for example, boundary testing is in scope performance is not).
Exploratory testing and a UAT even if it’s small, should always be
considered.
Communicate the plan to the client/business and project team.
Everyone needs to be aware and on board with the plan and their
role within the plan.
Test Plan should include: Execution Process, Defect
handling/reporting, daily updates on bugs and progress, Names
and Roles helping with testing, instructions for “test helpers”.
RBT Tip #4: Execute with RBT
In order to Meet the Project Need
Test highest priority items first followed by critical bug retests,
then lower priority items
Utilize existing automation where necessary if accessible:
Regression tests, browser checks, performance based, etc
Hold checkpoints with business throughout allowing them to
view/use the product to ensure they are getting what they asked
for.
There’s a risk they will want more/changes. When this happens,
start the Risk BasedApproach discussions again!
1 2 3 4
QA became a Top
Priority
QA became a
Trusted Partner
QA Test Strategies
Improved
Decrease in Critical
Production Issues
QA was planned
into Tech Debt
cards
Trusted business
partner
Pulled in to
provide insight on
future
projects/enhance
ments during
planning
“Test Everything”
was now targeted
to critical first
followed by
impacted
applications
Increased
communication at
the start of story
card work
More plan/test
time
Developer test
coverage
increased
RBT Wins
How a RBT Approach benefits the Team
THANK YOU

More Related Content

PPTX
Injecting Threat Modeling into the SDLC by Susan Bradley
PPTX
Is Test Planning a lost art in Agile? by Michelle Williams
PDF
Mindful Metrics (QAotHW 2018)
PPTX
Test Strategy-The real silver bullet in testing by Matthew Eakin
PPTX
Using JIRA for Risk Based Testing - QASymphony Webinar
PPTX
Risk Mitigation Using Exploratory and Technical Testing | QASymphony Webinar
PPTX
Test Estimation Hacks: Tips, Tricks and Tools Webinar
PDF
Behavior Driven Development—A Guide to Agile Practices by Josh Eastman
Injecting Threat Modeling into the SDLC by Susan Bradley
Is Test Planning a lost art in Agile? by Michelle Williams
Mindful Metrics (QAotHW 2018)
Test Strategy-The real silver bullet in testing by Matthew Eakin
Using JIRA for Risk Based Testing - QASymphony Webinar
Risk Mitigation Using Exploratory and Technical Testing | QASymphony Webinar
Test Estimation Hacks: Tips, Tricks and Tools Webinar
Behavior Driven Development—A Guide to Agile Practices by Josh Eastman

What's hot (20)

PDF
Hey You Got Your TDD in my SQL DB by Jeff McKenzie
PPTX
Exploratory Testing with JIRA | QASymphony Webinar
PDF
[HCMC STC Jan 2015] Proving Our Worth Quantifying The Value Of Testing
PPTX
Evolve or Die: Healthcare IT Testing | QASymphony Webinar
PPTX
From Gatekeeper to Partner by Kelsey Shannahan
PPTX
Agile Testing Analytics
PDF
[HCMC STC Jan 2015] Workshop Of Context-Driven Testing In Agile
PDF
Ken Johnston - Big Bugs That Got Away - EuroSTAR 2010
PPTX
QASymphony and TestPlant: Bringing Together Best-in-Class Test Management and...
PDF
Chicago Code Camp 2014 - Agile Testing in a waterfall world
PDF
Risk based testing with Jira and Jubula
PPTX
Thinking Beyond HPQC ALM
PPTX
Agile Testing
PDF
The New Agile Testing Quadrants: Bringing Skilled Testers and Developers Toge...
PDF
A Rapid Introduction to Rapid Software Testing
PDF
Tackling software testing challenges in the agile era
PPTX
New model
PPTX
10 signs your testing is not enough
PPT
! Testing for agile teams
PDF
Rapid Software Testing
Hey You Got Your TDD in my SQL DB by Jeff McKenzie
Exploratory Testing with JIRA | QASymphony Webinar
[HCMC STC Jan 2015] Proving Our Worth Quantifying The Value Of Testing
Evolve or Die: Healthcare IT Testing | QASymphony Webinar
From Gatekeeper to Partner by Kelsey Shannahan
Agile Testing Analytics
[HCMC STC Jan 2015] Workshop Of Context-Driven Testing In Agile
Ken Johnston - Big Bugs That Got Away - EuroSTAR 2010
QASymphony and TestPlant: Bringing Together Best-in-Class Test Management and...
Chicago Code Camp 2014 - Agile Testing in a waterfall world
Risk based testing with Jira and Jubula
Thinking Beyond HPQC ALM
Agile Testing
The New Agile Testing Quadrants: Bringing Skilled Testers and Developers Toge...
A Rapid Introduction to Rapid Software Testing
Tackling software testing challenges in the agile era
New model
10 signs your testing is not enough
! Testing for agile teams
Rapid Software Testing
Ad

Similar to There's no time to test, can you just automate it? by Anna Heiermann (20)

PDF
Risk Based Testing: Deferring the Right Bugs
PDF
Risk based testing a new case study
PPTX
Risk based testing - Final
PPT
Practical Application Of Risk Based Testing Methods
PDF
Mindtree risk based testing offerings.
PDF
[HCMC STC Jan 2015] Risk-Based Software Testing Approaches
PPTX
Put Risk Based Testing in place right now!
PPTX
The Risky Business of Testing by Shaminder Rai and Dave Patel
PPTX
BB6385_HarnessthetruepowerofRiskBasedTesting_06012016
PPTX
QA Fest 2017. Ирина Жилинская. Тестирование основанное на рисках в реальности...
PDF
Implementation of Risk-Based Approach for Quality & Cost Optimization
PPTX
risk based testing and regression testing
PPTX
Risk based testing, Katerina Meshkova
PDF
Web App Testing - A Practical Approach
PPTX
Approaching Quality in Digital Era
PPTX
Everything You Need to Build a Risk-Based Testing Strategy for SAP
PDF
Test Automation Beyond Test Execution
PDF
UiPath Test Automation using UiPath Test Suite series, part 1
PPTX
Patrick McKenzie Opticon 2014: Advanced A/B Testing
PDF
Would you bet your job on your A/B test results?
Risk Based Testing: Deferring the Right Bugs
Risk based testing a new case study
Risk based testing - Final
Practical Application Of Risk Based Testing Methods
Mindtree risk based testing offerings.
[HCMC STC Jan 2015] Risk-Based Software Testing Approaches
Put Risk Based Testing in place right now!
The Risky Business of Testing by Shaminder Rai and Dave Patel
BB6385_HarnessthetruepowerofRiskBasedTesting_06012016
QA Fest 2017. Ирина Жилинская. Тестирование основанное на рисках в реальности...
Implementation of Risk-Based Approach for Quality & Cost Optimization
risk based testing and regression testing
Risk based testing, Katerina Meshkova
Web App Testing - A Practical Approach
Approaching Quality in Digital Era
Everything You Need to Build a Risk-Based Testing Strategy for SAP
Test Automation Beyond Test Execution
UiPath Test Automation using UiPath Test Suite series, part 1
Patrick McKenzie Opticon 2014: Advanced A/B Testing
Would you bet your job on your A/B test results?
Ad

More from QA or the Highway (20)

PDF
KrishnaToolComparisionPPT.pdf
PPTX
Ravi Lakkavalli - World Quality Report.pptx
PPTX
Caleb Crandall - Testing Between the Buckets.pptx
PDF
Thomas Haver - Mobile Testing.pdf
PDF
Thomas Haver - Example Mapping.pdf
PDF
Joe Colantonio - Actionable Automation Awesomeness in Testing Farm.pdf
PDF
Sarah Geisinger - Continious Testing Metrics That Matter.pdf
PDF
Jeff Sing - Quarterly Service Delivery Reviews.pdf
PDF
Leandro Melendez - Chihuahua Load Tests.pdf
PDF
Rick Clymer - Incident Management.pdf
PPTX
Robert Fornal - ChatGPT as a Testing Tool.pptx
PDF
Federico Toledo - Extra-functional testing.pdf
PPTX
Andrew Knight - Managing the Test Data Nightmare.pptx
PDF
Melissa Tondi - Automation We_re Doing it Wrong.pdf
PDF
Jeff Van Fleet and John Townsend - Transition from Testing to Leadership.pdf
PPTX
DesiradhaRam Gadde - Testers _ Testing in ChatGPT-AI world.pptx
PDF
Damian Synadinos - Word Smatter.pdf
PDF
Lee Barnes - What Successful Test Automation is.pdf
PPTX
Jordan Powell - API Testing with Cypress.pptx
PPTX
Carlos Kidman - Exploring AI Applications in Testing.pptx
KrishnaToolComparisionPPT.pdf
Ravi Lakkavalli - World Quality Report.pptx
Caleb Crandall - Testing Between the Buckets.pptx
Thomas Haver - Mobile Testing.pdf
Thomas Haver - Example Mapping.pdf
Joe Colantonio - Actionable Automation Awesomeness in Testing Farm.pdf
Sarah Geisinger - Continious Testing Metrics That Matter.pdf
Jeff Sing - Quarterly Service Delivery Reviews.pdf
Leandro Melendez - Chihuahua Load Tests.pdf
Rick Clymer - Incident Management.pdf
Robert Fornal - ChatGPT as a Testing Tool.pptx
Federico Toledo - Extra-functional testing.pdf
Andrew Knight - Managing the Test Data Nightmare.pptx
Melissa Tondi - Automation We_re Doing it Wrong.pdf
Jeff Van Fleet and John Townsend - Transition from Testing to Leadership.pdf
DesiradhaRam Gadde - Testers _ Testing in ChatGPT-AI world.pptx
Damian Synadinos - Word Smatter.pdf
Lee Barnes - What Successful Test Automation is.pdf
Jordan Powell - API Testing with Cypress.pptx
Carlos Kidman - Exploring AI Applications in Testing.pptx

Recently uploaded (20)

PDF
Blue Purple Modern Animated Computer Science Presentation.pdf.pdf
PDF
CIFDAQ's Market Insight: SEC Turns Pro Crypto
PPTX
Effective Security Operations Center (SOC) A Modern, Strategic, and Threat-In...
PDF
NewMind AI Weekly Chronicles - August'25 Week I
PDF
Encapsulation theory and applications.pdf
PDF
KodekX | Application Modernization Development
PDF
Machine learning based COVID-19 study performance prediction
PDF
Network Security Unit 5.pdf for BCA BBA.
PPT
Teaching material agriculture food technology
PDF
Unlocking AI with Model Context Protocol (MCP)
PDF
Build a system with the filesystem maintained by OSTree @ COSCUP 2025
PDF
Review of recent advances in non-invasive hemoglobin estimation
PDF
Architecting across the Boundaries of two Complex Domains - Healthcare & Tech...
PDF
Spectral efficient network and resource selection model in 5G networks
PDF
The Rise and Fall of 3GPP – Time for a Sabbatical?
PDF
Diabetes mellitus diagnosis method based random forest with bat algorithm
PDF
7 ChatGPT Prompts to Help You Define Your Ideal Customer Profile.pdf
PDF
NewMind AI Monthly Chronicles - July 2025
PDF
Modernizing your data center with Dell and AMD
PPT
“AI and Expert System Decision Support & Business Intelligence Systems”
Blue Purple Modern Animated Computer Science Presentation.pdf.pdf
CIFDAQ's Market Insight: SEC Turns Pro Crypto
Effective Security Operations Center (SOC) A Modern, Strategic, and Threat-In...
NewMind AI Weekly Chronicles - August'25 Week I
Encapsulation theory and applications.pdf
KodekX | Application Modernization Development
Machine learning based COVID-19 study performance prediction
Network Security Unit 5.pdf for BCA BBA.
Teaching material agriculture food technology
Unlocking AI with Model Context Protocol (MCP)
Build a system with the filesystem maintained by OSTree @ COSCUP 2025
Review of recent advances in non-invasive hemoglobin estimation
Architecting across the Boundaries of two Complex Domains - Healthcare & Tech...
Spectral efficient network and resource selection model in 5G networks
The Rise and Fall of 3GPP – Time for a Sabbatical?
Diabetes mellitus diagnosis method based random forest with bat algorithm
7 ChatGPT Prompts to Help You Define Your Ideal Customer Profile.pdf
NewMind AI Monthly Chronicles - July 2025
Modernizing your data center with Dell and AMD
“AI and Expert System Decision Support & Business Intelligence Systems”

There's no time to test, can you just automate it? by Anna Heiermann

  • 1. There’s No Time to Test Can’t You Just Automate It? A Guide to Managing Test Strategy from a Risk Based Perspective Anna Heiermann – Senior Quality Analyst Consultant - HMB
  • 2. QA Career started 10 years ago Found career by accident Senior Consultant with HMB Married, 2 Dogs Interested in Finding Ways to Manage Stress 90% 70% 96% 98% Stress Management Scale Powerlifting Family/Puppies/Friends Music Risk Management Anna Heiermann About Me
  • 3. The Worst Bug The Worst Bug I Didn’t Catch • Worst Event in client history • Requested to build a site with a product form in one day • Bug: Form was not saving a very critical field in several cases • Successful submit followed by going back to form using back browser button • Result: Thousands of impacted forms did not contain most critical piece of information Aftermath • Lots of “Lessons Learned” • Unable to shake off the impacts of what happened with what wasn’t caught • Worried about missing something very critical for several projects to come • Easily overwhelmed with what was not in my control
  • 4. No Communication of Test Coverage to Client, No Test Strategy Little Release Management No Risk Based Discussions What Happened?
  • 6. 6 Deadly Miss – 6/11/2000 Radiation Therapy Software : Data entry miscalculation when entering beam block data and interpreting beam block data caused overexposure No malfunction, but data caused overexposure • Lack of requirements (procedures) • Lack of testing Result: FDA Statement 2017 • 28 patients overexposed • 20-100 percent over prescribed dose • 9 patients died, 5 confirmed radiation overexposure • Remaining patients expected to develop complications https://www.fda.gov/Radiation- EmittingProducts/RadiationSafety/AlertsandNotices/ucm116533. htm
  • 7. 7 The Age of Airline Outages British Airways - 2017 • Systems failure impacted check-in and operational systems • All flights out of Heathrow cancelled for days til resolved Delta – 2016, 2017 • Electrical component failure led to transformer shutdown • Transformer provided power to data center, servers weren’t connected • Lost 100 million in Revenue, suffered same glitch a few months later United Airlines – 2017 • “Computer problem” grounded hundreds of flights causing delays – several disruptions from June - October Southwest - 2017 • 2000 flights canceled after failed network router outage https://www.reuters.com/article/us-ual-flights/united-flights-delayed- after-computer-glitch-grounds-u-s-planes-idUSKBN15705C https://www.npr.org/sections/thetwo-way/2017/05/29/530587512/on- day-3-of-cancellation-chaos-british-airways-edges-closer-to-recovery https://www.cnbc.com/2017/05/27/british-airways-says-computer- outage-causing-global-delays.html
  • 8. 8 Starbucks Goes Dark - 2017 Cause: Overnight store register technology update caused store outages in Canada and US • Many stores closed • A few stores only offered drip coffee and took cash • Some handed out free cups of coffee Result: Starbucks Survives, lost revenue • Unexpected outage caused no revenue for several hours • Free coffee – At least customers will return as some stores tried to make it right • Still under investigation – exposure of scammers finding ways to get into Starbuck Customer accounts and drain balances http://fortune.com/2017/05/16/starbucks-computers/
  • 9. Risk Based Testing ISQTB Definition An approach to testing to reduce the level of product risks and inform stakeholders of their status, starting in the initial stages of a project. It involves the identification of product risks and the use of risk levels to guide the test process Reference Page 54 https://www.istqb.org/downloads/send/2-foundation-level-documents/3-foundation-level-syllabus-2011.html4 Benefits of Risk Based Testing Collaboration on Strategy and Approach with QA, the Project Team, and client Client gains more education and awareness on high priority and critical items from a technical and business perspective Better trust/confidence with product quality and QA Team Potential to help save/meet budget or time restraints Risk Based Testing “Well, the code broke and we’re not sure of what the fix has impacted, so you’ll have to test everything”
  • 10. • Panama Radiation Incident • “Changes” no matter how big or small still can cause catastrophic consequences if testing is not a part of the change • Risk Based Management with a Risk Based Test approach is a MUST even if the change is a last minute “quick” thing • Airlines • Culprits may be presented with the hardware, but affect the software. • Planning testing from a Risk perspective around outages can verify whether/not the software will withstand the glitch • Starbucks • Not life or death, but outages are lost revenue and more expensive to fix and test in production • “Change” to existing products are just as critical to test as a brand new application • “Changes” with a Risk Based Test approach will increase the ability to identify critical defects • RBT encourages the entire team to think critically to identify what should be tested first • My Worst Bug • Should have had a better understanding of the functionality behind the scenes • Better tests specifically around the behavior of the form with navigation would have increased the chance the defect would have been caught • Business would have had more involvement and visibility in our testing process • Risk Based Strategy would increase overall client/dev team communication and increased collaboration on what to test W h a t w e c a n l e a r n f r o m : Lessons Learned
  • 11. 11 v Venting Sessions: At the Bar Product Knowledge How well do you know what you’re testing? Do you RAM? Do you use a Risk Assessment Matrix to determine the probability of high risk areas and discuss these with your team as you plan? Communication What’s your test approach? Who is helping you? Is your team and client onboard? Execution What are the state of your Risk BasedTestcases? Are you maintaining traceability? Do you use RBT for every level of testing?
  • 12. RBT Tip #1: Know the Code In order to Better Understand Your Product Sit down with the senior developer/lead tech to understand both front end and back end functionality. Benefit – Better test cases and test strategy approach. Assess and determine what aspects behind the scenes share the same code. Understanding the way a product is coded will help uncover potential high risk items that have shared code and allow for better timing around when something should be tested.
  • 13. The Challenge Continuous deployments with new templates caused testing to be overwhelmed with a high number of pages to validate content, images, browser testing, etc. Functionality was equal if not lower priority as a result. CMS Session enabled QA to reprioritize what was critical than what they assumed was critical and decreased test time for shared features/pages No Understanding into what CMS was Too many repeat test cases to test all pages using same features and templates CMS and RBT Risk Based Testing against CMS and Site Redesign Ý
  • 14. RBT Tip #2: Build a RAM In order to PRIORITIZE RISK RAM = RISK ASSESSMENT MATRIX Meet with Product Owner/client, development team and determine all critical aspects of the application Prioritize the most critical aspects that are to be tested first. What’s most important to your dev team and your client?
  • 15. The Challenge Tech Debt card was originally prioritized as a “low impacting” change. However, the way it was implemented had an impact on every single table the team had coded from the beginning of a project. RAM designed with Business and Dev team to assess most critical pieces of data. Matrix helped identify these and then the entire team helped in testing these areas to meet timeline. “T” Shaped Team! Short timeline to deployment, not enough QA Resources Too many test cases in regression bed that wouldn’t cover all the critical concerns from the change Creating a RAM Risk Based Testing using Risk Assessment Matrix Ý D E E P BROAD Able to apply knowledge across situations Functional/SpecificSkillSet
  • 16. RBT Tip #3: Communicate the Plan In order to Set Test Scope and Expectation Build a Test Approach defining the test coverage that will be provided based on the outcome of the RAM session. List out testing types that will be done and others that will not (for example, boundary testing is in scope performance is not). Exploratory testing and a UAT even if it’s small, should always be considered. Communicate the plan to the client/business and project team. Everyone needs to be aware and on board with the plan and their role within the plan. Test Plan should include: Execution Process, Defect handling/reporting, daily updates on bugs and progress, Names and Roles helping with testing, instructions for “test helpers”.
  • 17. RBT Tip #4: Execute with RBT In order to Meet the Project Need Test highest priority items first followed by critical bug retests, then lower priority items Utilize existing automation where necessary if accessible: Regression tests, browser checks, performance based, etc Hold checkpoints with business throughout allowing them to view/use the product to ensure they are getting what they asked for. There’s a risk they will want more/changes. When this happens, start the Risk BasedApproach discussions again!
  • 18. 1 2 3 4 QA became a Top Priority QA became a Trusted Partner QA Test Strategies Improved Decrease in Critical Production Issues QA was planned into Tech Debt cards Trusted business partner Pulled in to provide insight on future projects/enhance ments during planning “Test Everything” was now targeted to critical first followed by impacted applications Increased communication at the start of story card work More plan/test time Developer test coverage increased RBT Wins How a RBT Approach benefits the Team

Editor's Notes

  • #10: Start with discussing the episode where the fridge broke and his friends came in and he had eaten everything. So similar to the common phrase, well the code broke and we’re not sure what the fix impacted, so you’ll have to test everything
  • #12: I find myself asking these common things anytime I’m out to lunch/happy hour with fellow testers. If we were having a drink and you were venting, these are some quick topics I’d bring up
  • #14: Client story