How risk assessment scores are calculated

This topic describes how risk assessment scores are calculated.

  • The risk assessment score for an individual risk is the average of the Likelihood, Impact, and Current Impact values. Importance is not part of the calculation. Likelihood, Impact, and Current Impact are rated on a scale of 1-3 (for Low, Medium, or High), but the overall assessment score for a particular risk is calculated to be anywhere from 0-5. The software uses a formula is to convert from the 1-3 scale to a 0-5 scale.
  • If Current Impact is set to No Impact, the assessment score of the individual risk is simply set to 0.
  • If Current Impact is set to Unassigned, Current Impact is not included in the calculation.
  • If Current Impact is set to Low, Medium, or High, then the following formula is used:
    Risk Assessment = ((Likelihood + Impact + Current Impact)/3) * 2 - 1
  • For dynamic risks, such as Test Case Weight, the assessment score is based only on the pre-defined settings. Current Impact is not part of the assessment.
    Note: Currently, Test Case Weight is the only dynamic risk.
  • The overall risk assessment score for the test plan, test case, or test suite is the weighted average of the risk assessment score for each row, weighted by Importance. Importance can be set from 1 to 5, with 3 or neutral being the default.
Example 1:

Likelihood = Medium , Impact = Medium, Current Impact = High

((2 + 2 + 3)/3) * 2 - 1) = 3.666
Example 2:

Likelihood = Low , Impact = Medium, Current Impact = Medium

((1 + 2 + 2)/3) * 2 - 1) = 2.333
Note: The reported risk assessment ignores any numbers to the next of the decimal point. Thus, 3.666 is rounded off to 3.