Thomas Owens
  • Member for 10 years, 6 months
  • Last seen this week
6 answers
4 votes
852 views
Is security testing the sole responsibility of testers or part of a mixed team?
Accepted answer
5 votes

All aspects of quality - functional and non-functional testing - should be solved by the whole team. Introducing a wall where developers develop and testers test introduces hand-offs, which increases ...

View answer
11 answers
25 votes
5k views
QA gets all the work at the end of the sprint
5 votes

There are a few different ways to approach this problem. From a Scrum perspective, your Development Team does not have sub-teams. You may have specialists, such as people who specialize in testing, ...

View answer
4 answers
5 votes
253 views
How to track which stories / functionality in an agile project have automation test coverage?
5 votes

The first question to ask yourself is if this level of traceability is necessary. For some people, maybe the answer is yes. For others, perhaps not. If you don't need traceability between story and ...

View answer
7 answers
5 votes
4k views
Feature branch testing before code is merged?
5 votes

I wrote an answer to a similar question on the Software Engineering Stack Exchange. There is no "industry standard". In a perfect world, I would want the testing to happen twice. The "...

View answer
5 answers
4 votes
98 views
Should bugs be story-point estimated?
4 votes

There's no one right answer. I'm not entirely sure that I'd buy the developers' argument that it is too difficult to assess the difficulty of fixing a bug. The very same argument could be said about ...

View answer
1 answers
1 votes
50 views
The third amigo problem when customer is unknown
Accepted answer
4 votes

This is an example of building a software system for the marketplace. In this case, you have many customers or users, each of which has its expectations for the system. However, someone must have ...

View answer
1 answers
2 votes
156 views
Acceptance Testing & Scrum - How do you handle bugs that occur during acceptance testing in parallel to ongoing/upcoming sprints?
3 votes

Henrik Kniberg is generally right. When a defect is found after the work is considered "Done" and is in some downstream activity, like UAT, put any issues found on the Product Backlog and ...

View answer
3 answers
4 votes
260 views
Difference between test strategy and test plan
3 votes

The test strategy describes how - the overall test process, the techniques and practices used, design of test cases, selection of cases for retesting or regression, management and maintenance of the ...

View answer
1 answers
0 votes
36 views
The role of the classic software tester in Scrum?
2 votes

If your definition of "classic software tester" is someone who takes in requirements and software and produces things like "tested software", defect reports, test reports, and so ...

View answer
1 answers
0 votes
39 views
Vulnerability testing assessment in an agile development environment
2 votes

Agile methods are about fast feedback loops. The best practices for integrating vulnerability testing into the process will be different depending on what your process looks like. If you are using ...

View answer
2 answers
1 votes
57 views
Security test plan for vulnerability test
2 votes

If you're interested in relevant standards, the most relevant one is likely to be IEEE Standard 1012, which is the IEEE Standard for System, Software, and Hardware Verification and Validation. I've ...

View answer
7 answers
1 votes
213 views
Should you create a manual test script before automating it?
2 votes

There's no one answer to this. It's highly dependent on the context in which you are working. For example, I've worked in fields with varying degrees of regulation, where traceability from requirement ...

View answer
6 answers
2 votes
204 views
Is there a correct term for testing done by "testers" hired just to use the app as in real life?
Accepted answer
2 votes

There are different ways to classify testing. If you want to classify it based on the level of testing, I would call it "system testing" or "end-to-end testing", since you are working with a system ...

View answer
2 answers
2 votes
31 views
Should you write tests that are basically for no-op to catch errors? (e.g. test a transition does NOT happen in a state machine)
1 votes

If you were to apply equivalence partitioning, you would end up with a few partitions: x < 5 5 <= x <= 12 x > 12 Given that requirement, I would expect at least those three test cases to ...

View answer
2 answers
2 votes
102 views
Test Strategy Documents seem obsolete in agile teams. Am I wrong?
1 votes

The idea of what is considered essential or wasteful work depends on the context. What is wasteful for one organization could be value-adding work for another, based on their needs and the needs of ...

View answer
2 answers
0 votes
76 views
Test case preparation and execution time
1 votes

Some common estimation techniques can help. Having historical data can help. For each test case, measure the time it takes to complete. Given a large enough body of test cases, you can determine how ...

View answer
3 answers
0 votes
55 views
What expectations should be given to the client with regards to how much time UAT takes and how many issues might be found?
1 votes

I'm not aware of any good rule of thumb for the effort for carrying out user acceptance testing. As Cosmin said, one factor is the type of application - different types of systems will have different ...

View answer
2 answers
-1 votes
32 views
What should be the testing type for a new version of an automated test case if edited manually
1 votes

This is almost certainly going to depend on your team's or organization's process. Some teams and organizations that I have worked with require that new or modified test cases be executed manually ...

View answer
1 answers
-2 votes
42 views
How to apply software International Standard ISO/IEC 27001 and 27018
0 votes

Meeting standards such as ISO 27001 and 27018 are usually confirmed by performing audits. The organizing providing the product or service would need to be audited, and there are companies that can be ...

View answer
10 answers
16 votes
4k views
How can I find the weakness of our "Quality Assurance Process"?
0 votes

Depending on how frequently your process changes, I may not want to look at historical data or would want to limit how far back I go for historical data. Instead, I'd set up a method for looking at ...

View answer
1 answers
0 votes
596 views
Functional or non-functional issue: a button kept pressed causes troubles
Accepted answer
0 votes

Have you considered that it's not an issue in the design or implementation, but a defect in the requirements? The spec that you quoted doesn't mention what to do in this particular case. I would call ...

View answer