Search team directs testing efforts with risk mapping
Sep 3, 2020Erick Banks

Summary
This post introduces the concept and implementation of risk mapping for directing testing efforts within the search team. It details the process of identifying 'risk facets' (e.g., record insertion, indexing, recall, speed, efficiency, cost), mapping existing issues to these facets, assessing testing coverage (implicit vs. explicit), and constructing a risk matrix (risk level, impact, likelihood). The goal is to proactively identify and mitigate unmitigated risks by focusing testing resources on high-risk areas, moving away from reactive bug fixing.
More from the Bug Triage and Reporting trail
- Shai-Hulud copycat campaign targets Python developers through PyPI typosquatting
- Manage vulnerability noise at scale with auto-dismiss policies
- How to transform compliance observation management with GitLab
- Self-service security alert handling with GitLab's UAM
- How GitLab measures Red Team impact: The adoption rate metric