Risk Based Software Testing Resources

[heather_reid]

Someone recently asked on the Ministry of Testing Slack:

does anyone have any recommended resources for risk-based testing?

@berenvd kindly shared this blog post from @marcel about using TestSphere to map risks.

RiskStorming - Maping Risks with TestSphere

When I searched the Dojo for “risk”, “Risk Based Testing Because You Can’t Do EVERYTHING” by @jennydoesthings at TestBash Philly is the top hit

Risk Based Testing Because You Can't Do EVERYTHING - Jenny Bramble

Followed by “How to Identify Risk in a Large Code Base” with @ns1

How to Identify Risk in a Large Code Base with Noah Sussman

We also have a Club post following on from a TestChat about identifying risks

Our first #TestingChat is all about Identifying Risks

This thread is to carry on and collate the conversations from Twitter. If someone said something you want to save so others can read it, post it here! If someone recommended a resource, list it here! If you want to answer the questions here instead, here they are, fire away! Look up #TestingChat on Twitter to follow the chat!

Over to you, what resources would you recommend for risk based testing?

[hattori]

I expect many in the MoT community have encountered The Risks Digest Forum on Risks to the Public in Computers and Related Systems. But I have not seen any mention of it here. It’s a collection of posts dating back to the mid eighties, moderated by Peter G. Neumann. Often the material is not just about hypothetical risks, but real events.
We manage our software development and testing based on our judgment about risks. I see this forum as a resource to inform our decisions. It can help reveal what has been released unchecked. And there are examples of misuses I could not dream of.
I recommend Risks to the Public in moderate doses, starting with recent posts.
https://catless.ncl.ac.uk/Risks/