A risk-based approach is being taken to test a new web-based retail application. Which of the following activities is the Technical Test Analyst NOT usually expected to perform?

In a risk-based testing approach, the Technical Test Analyst (TTA) contributes to technical product risk management by assessing the likelihood (probability) of technical failures, such as those related to performance, reliability, and security. However, assessing the business impact of identified risks is primarily the responsibility of business stakeholders, the Test Analyst (TA), or the Test Manager (TM). The TTA provides technical expertise regarding likelihood and technical risk mitigation, not business impact evaluation.

A. Understanding technical risk probability is a core task for a TTA during technical risk identification and analysis.
B. Assessing the likelihood of security-related technical risks directly aligns with the non-functional testing domain of the TTA.
D. Designing test cases to mitigate identified reliability risks is a fundamental responsibility of a TTA.

1. ISTQB Advanced Level Technical Test Analyst (CTAL-TTA) Syllabus v4.0 (2021), Section 1.2 "Risk Identification, Assessment and Risk Mitigation".

2. ISTQB Advanced Level Test Manager (CTAL-TM) Syllabus v3.0, Section 2.3 "Risk-Based Testing".