1st Edition
Software Quality Assurance Integrating Testing, Security, and Audit
CONCEPT
Quality Concept and Perspectives
Introduction
Software Quality Concept
Software Quality Characteristics
ISO/IEC 9126
Control Objectives for Information and Related Technology (COBIT)
Validation and Verification
Reviews and Audit
Management and Process
Introduction
Software Management
Software Life Cycle Models
Life Cycle Processes
TESTING
Testing: Concept and Definition
Introduction
Testing in the Software Life Cycle
Requirements
Software Testing Life Cycle
Kinds/Types of Testing
Suggested Readings
Testing: Plan and Design
Introduction
Plan and Strategy
Test Plan
Test Tools
Test Scope
Test Approach and Stages
Test Schedule
Defect Reporting and Tracking
Roles and Responsibilities
Reference Documents
Testing Estimation
Lessons Learned
Test Design Factors
Test Case Specification and Design
Test: Execution and Reporting
Introduction
Starting Test Execution
Test Result Reporting
View and Analyze Test Results
CHALLENGES
Incident Management
Introduction
Overview on Incident Management
Why Incident Management Is Important
Identification
Investigation and Analysis
Response and Recovery
Issues
Security Incidents
Defect Management
Introduction
Definition and Analysis
Process and Methodology
Root Cause Analysis
Defect Prevention
Risk Vulnerability and Threat Management
Introduction
Risk Management
Vulnerability, Risk, and Threat Analysis
Risk Management Life Cycle
Effective methods to identify Risks
Risk Assessment Matrix
Risk Response Strategy
Risk Assessment & Contingency Plan
Vulnerability Risk and Threat Analysis
OCTAVE and Risk Management
Appendix A: Sample
Appendix B: Risk Factors
SOFTWARE QUALITY EXPECTATION
Information Security
Introduction
Definition and Importance
Methodology
Security Policy Document
Information Audit
Introduction
Definition and Planning
Audit Process and Procedure
Auditing and Information Security
Software Reliability and Process Improvement
Introduction
Definition and Measurement
Measurement-Based Assurance
Quality Metrics Methodology
Software Reliability Measurement & Estimation
CMMs The Capability Maturity Model SEI/CMM
Software Process Improvement and Capability Determination (SPICE)
Appendix: Software Process Improvement
Biography
Abu Sayed Mahfuz, ITIL, MIS, MA, has over 15 years of experience in the business and information technology profession, including database manager, technology manager, software quality lead, and technology instruction in several prestigious multinational companies. He is a distinguished trainer, speaker, and book author. Mr. Mahfuz earned his master’s degree in computer and information systems from the University of Detroit Mercy and two other master’s degrees from Malaysia and Bangladesh. He also holds ITIL Foundation certification and several software quality, cyber security, and phishing related internal certifications from Hewlett Packard.
