How risk assessment scores are calculated
This topic describes how risk assessment scores are calculated.
- The risk assessment score for an individual risk is the average of the Likelihood, Impact, and Current Impact values. Importance is not part of the calculation. Likelihood, Impact, and Current Impact are rated on a scale of 1-3 (for Low, Medium, or High), but the overall assessment score for a particular risk is calculated to be anywhere from 0-5. The software uses a formula is to convert from the 1-3 scale to a 0-5 scale.
- If Current Impact is set to No Impact, the assessment score of the individual risk is simply set to 0.
- If Current Impact is set to Unassigned, Current Impact is not included in the calculation.
- If Current Impact is set to Low, Medium, or High, then
the following formula is used:
Risk Assessment = ((Likelihood + Impact + Current Impact)/3) * 2 - 1 - For dynamic risks, such as Test Case Weight, the assessment score is based only on the
pre-defined settings. Current Impact is not part of the
assessment. Note: Currently, Test Case Weight is the only dynamic risk.
- The overall risk assessment score for the test plan, test case, or test suite is the weighted average of the risk assessment score for each row, weighted by Importance. Importance can be set from 1 to 5, with 3 or neutral being the default.
Example 1:
Likelihood = Medium , Impact = Medium, Current Impact = High
((2 + 2 + 3)/3) * 2 - 1) = 3.666Example 2:
Likelihood = Low , Impact = Medium, Current Impact = Medium
((1 + 2 + 2)/3) * 2 - 1) = 2.333Note: The
reported risk assessment ignores any numbers to the next of the decimal point. Thus, 3.666 is
rounded off to 3.