ISTQB CTAL-TTA study plan
ISTQB CTAL-TTA · Give each week a clear focus.
8 weeks · About 7 hours per week
Risk-based testing & White box testing
Explain how product risk analysis drives test depth, selection of test design techniques, and the choice between static and dynamic approaches
Distinguish risk identification, risk assessment (likelihood x impact), and risk mitigation, and assign a risk level to at least six product quality characteristics
Derive statement and decision coverage targets for a small code module and justify how risk level changes the required coverage
Map the CTAL-TTA syllabus risk-based testing terms to concrete test planning artefacts such as the test strategy, test approach, and exit criteria
Your checkpoint
A one-page risk matrix covering six quality characteristics, each linked to a chosen white-box coverage target and a written justification
Risk-based testing & White box testing
Apply statement, decision, and decision-condition coverage to a 20-30 line function and calculate the exact number of test cases each criterion needs
Construct a control flow graph from source code and enumerate all independent paths to compute cyclomatic complexity three ways (edges-nodes+2, predicates+1, regions)
Identify infeasible paths and explain why path coverage is usually impractical as an exit criterion
Design test cases that achieve 100% decision coverage but less than 100% condition coverage, and explain what defect class that gap can hide
Your checkpoint
A worked white-box analysis of one function: control flow graph, cyclomatic complexity by three methods, test case table with per-criterion coverage percentages
White box testing & Static and dynamic analysis
Write test cases for modified condition/decision coverage (MC/DC) on a compound boolean expression and verify the independence requirement for each condition
Explain how data flow analysis (definition-use pairs, all-definitions, all-uses) complements control flow coverage and select test cases for all-uses coverage
Classify static analysis findings by severity and decide which ones block release versus which are logged as technical debt
Run at least one static analysis or linter tool on real code and triage its output into true positives, false positives, and accepted risks
Your checkpoint
A triage report of static analysis findings on a real codebase, with each finding classified, justified, and tied to a coverage or risk argument
Static and dynamic analysis & Risk-based testing
Compare static analysis, dynamic analysis, and review techniques, and state which defect types each detects that the others miss
Explain how dynamic analysis (memory checking, runtime assertions, instrumentation) is applied during test execution and how results feed back into risk assessment
Design a review process for code or testware using a checklist derived from the top product risks, and define entry and exit criteria for it
Connect defect data from static and dynamic analysis to the re-assessment of risk likelihood in an ongoing test cycle
Your checkpoint
A review checklist plus a short written argument linking static/dynamic analysis results to updated risk ratings for a sample release
Non-functional testing
Select non-functional test types (performance, load, stress, scalability, security, usability, reliability, maintainability, portability) appropriate to stated product risks, and justify each selection
Define measurable non-functional requirements and derive acceptance thresholds, including percentile response times and resource utilisation limits
Design a load profile with ramp-up, steady state, and ramp-down, and explain how to interpret results where throughput plateaus
Distinguish load, stress, spike, soak, and failover testing by the risk each one targets and the failure mode each one exposes
Your checkpoint
A non-functional test plan for one system: selected test types with risk justification, quantified thresholds, and a load profile with interpretation guidance
Non-functional testing & Test automation
Explain how non-functional test results are analysed statistically and how measurement noise and environment differences affect pass/fail decisions
Compare test automation architectures (keyword-driven, data-driven, behaviour-driven, linear scripting) and match each to a project context with stated trade-offs
Apply the test automation process: suitability assessment, tool selection, proof of concept, and total cost of ownership including maintenance
Identify automation design principles that reduce maintenance cost, such as abstraction layers, no hard-coded data, and independent test cases
Your checkpoint
A tool and architecture selection memo comparing two automation approaches for a stated context, including estimated maintenance cost per 100 automated checks
Test automation & Risk-based testing
Design a test automation strategy with a layered test pyramid, defining what to automate at unit, API, and UI level and what to keep manual
Specify metrics that show automation value (defect detection effectiveness, execution time saved, flakiness rate, maintenance effort) and set target values
Explain how automated checks feed continuous integration, including failure triage and gating criteria for risk-based release decisions
Apply risk-based prioritisation to decide the automation order of existing manual test cases
Your checkpoint
An automation strategy document with automation candidates ranked by risk and ROI, plus a metrics dashboard definition with target values
Risk-based testing & White box testing & Static and dynamic analysis & Non-functional testing & Test automation
Consolidate all five domains into a single risk-based test approach for one end-to-end scenario, from risk analysis through coverage selection, static and dynamic analysis, non-functional thresholds, and automation decisions
Complete two timed mock exams and review every wrong answer to identify the specific syllabus concept that was misunderstood
Re-derive from memory the coverage formulas, cyclomatic complexity methods, and automation selection criteria without notes
Write a personal list of the ten weakest concepts and close each gap with a targeted worked example
Your checkpoint
A full end-to-end test approach document for one scenario plus a scored mock exam log with a remediation list of the ten weakest concepts
Milestones
Week 2: Can compute cyclomatic complexity three ways and state the exact number of test cases needed for statement, decision, and condition coverage on unseen code without notes
Week 4: Can explain in writing which defect classes static analysis, dynamic analysis, and reviews each catch, and can tie analysis findings to updated risk ratings
Week 6: Can justify non-functional test type selection from product risks and defend an automation architecture choice with maintenance cost reasoning
Week 8: Scores at least 75% on two timed mock exams and has a written remediation list showing every wrong answer traced to a specific concept