Risk assessment identifies and evaluates threats to a feature, then prioritizes which risks deserve testing attention. LLMs can expand existing analysis when given substantial context, but human judgment remains responsible for accepting or rejecting suggestions. section 3.3.3 section 8.1.1
A practical risk-assessment workflow can:
- Start with a user story or requirements and identify initial risks. section 8.1.1
- Provide the existing analysis to an LLM and request additional risks or design-testing questions. section 3.3.3 section 8.1.1
- Review suggestions for relevance, repetition, and useful reframing before converting selected risks into testing charters. section 8.1.1
Report and booking risks
For a reporting and administration user story, proposed risks include missing bookings, difficult-to-parse reports, broken navigation, failed admin submissions, confusing controls, and unhandled errors. Repeated or irrelevant suggestions are discarded before testing begins. section 8.1.1
