Skip to content
istqb-technical-test-analyst logo

ISTQB Technical Test Analyst (CTAL-TTA v4.0) Skill

istqb-technical-test-analyst

ISTQB Certified Tester Advanced Level – Technical Test Analyst (CTAL-TTA v4.0). Covers white-box test techniques (statement, decision, MC/DC, multiple condition), static and dynamic analysis, non-functional quality characteristic testing (security, reliability, performance, maintainability, porta...

SKILL.md

Full skill instructions

ISTQB Technical Test Analyst (CTAL-TTA v4.0) Skill

Knowledge Areas

#AreaSyllabus ChapterRules
1Risk-Based TestingCh 1risk-based-testing-tta
2White-Box TechniquesCh 2statement-testing, decision-testing, modified-condition-decision-testing, multiple-condition-testing, api-testing, white-box-technique-selection
3Static & Dynamic AnalysisCh 3control-flow-analysis, data-flow-analysis, static-analysis-maintainability, dynamic-analysis
4Quality CharacteristicsCh 4non-functional-test-planning, security-testing, reliability-testing, performance-testing, maintainability-testing, portability-testing, compatibility-testing, operational-profiles
5ReviewsCh 5technical-reviews-tta, review-checklists
6Test Tools & AutomationCh 6test-automation-project, automation-approaches, specific-test-tools

Quick Decision Trees

Which White-Box Technique?

Is the system safety-critical (aerospace, automotive, medical)?
├── YES → Check IEC 61508 SIL level:
│         SIL 1 → Statement + Branch coverage
│         SIL 2 → Branch coverage
│         SIL 3 → MC/​DC (recommended)
│         SIL 4 → MC/​DC (highly recommended)
└── NO  → Check applicable factors:
          Contract/​regulatory requirement? → Use required technique
          Complex boolean conditions?      → MC/​DC or Multiple Condition
          Simple control flow?             → Decision/​Branch coverage
          Minimum baseline needed?         → Statement coverage
          All condition combos needed?     → Multiple Condition (2^N)

Coverage Subsumption Hierarchy

Multiple Condition Testing  (strongest — 2^N combinations)
         ↑ subsumes
    MC/​DC Testing           (N+1 minimum tests)
         ↑ subsumes
   Decision/​Branch Testing  (all TRUE/​FALSE outcomes)
         ↑ subsumes
   Statement Testing        (weakest — baseline only)

Higher coverage subsumes all lower levels. Choose the lowest level that satisfies your risk/​safety requirement.

Which Quality Characteristic Test?

Does the threat involve unauthorized access or data breach?  → security-testing
Is the concern about system uptime, MTBF, failover?         → reliability-testing
Is the concern about response time, throughput, or load?    → performance-testing
Is the concern about code structure, coupling, modifiability?→ maintainability-testing
Is the concern about install, run on multiple platforms?    → portability-testing
Is the concern about shared environment, resource conflicts? → compatibility-testing

Non-Functional Test Planning

1. Identify quality characteristics from stakeholder requirements
2. Benchmark existing system (if available)
3. Plan production-like test environment
4. Acquire specialized tools
5. Address data security/​privacy constraints
6. Write test specifications using operational profiles

Common Patterns

Operational Profile Usage

  • Define user types and frequency of operations
  • Generate pseudo-random test inputs weighted by usage frequency
  • Apply to both reliability testing (MTBF estimation) and performance testing (realistic load)
  • Tools can automate test case generation from profiles

Risk-Based Technique Selection

  • High technical risk (complex logic, high change rate, defect history) → stronger coverage technique
  • TTA contributes probability assessment; TA contributes business impact assessment
  • Risk level determines minimum coverage target and technique selection

MC/​DC Minimum Test Count

  • N unique atomic conditions → minimum N+1 test cases
  • Each condition must independently affect the decision outcome
  • Watch for short-circuit evaluation (compiler may not evaluate all conditions)

Anti-Patterns

Anti-PatternProblemCorrect Approach
Using statement coverage for SIL 3/​4 safety systemsMisses condition defects that cause catastrophic failureApply MC/​DC per IEC 61508 SIL table
Skipping dynamic analysis until system testMemory leaks and wild pointers found too late, expensive to fixStart dynamic analysis at component/​integration level
Ignoring non-functional test planningEnvironment unavailable, tools not acquired, data privacy not addressedPlan non-functional tests early with dedicated environment and tool budget
Capture/​playback automation without refactoringBrittle scripts, high maintenance burden, poor ROIUse data-driven or keyword-driven approach; treat automation as software project

Rule Reference Index

Rule FileChapterPriorityTopic
risk-based-testing-tta1CRITICALTechnical risk ID, assessment, mitigation
statement-testing2HIGHStatement coverage metric and limits
decision-testing2CRITICALDecision/​branch coverage, subsumption
modified-condition-decision-testing2CRITICALMC/​DC for safety-critical systems
multiple-condition-testing2HIGHAll 2^N condition combinations
api-testing2HIGHAPI test types and defect classes
white-box-technique-selection2CRITICALSelection factors, SIL table, subsumption
control-flow-analysis3HIGHAnomalies, cyclomatic complexity
data-flow-analysis3HIGHVariable lifecycle, anomaly sequences
static-analysis-maintainability3MEDIUMStandards, coupling/​cohesion, structure
dynamic-analysis3HIGHMemory leaks, wild pointers, profiling
non-functional-test-planning4CRITICALPlanning factors, environment, benchmarking
security-testing4CRITICALThreats, approval, ISO 25010 sub-chars
reliability-testing4HIGHMTBF, availability, fault tolerance
performance-testing4HIGHLoad/​stress/​scalability, sub-chars
maintainability-testing4MEDIUMStatic+dynamic, sub-chars
portability-testing4MEDIUMInstallability, adaptability, replaceability
compatibility-testing4MEDIUMCoexistence, resource conflicts
operational-profiles4HIGHUsage patterns for reliability/​performance
technical-reviews-tta5HIGHTTA viewpoint, checklists, integration plans
review-checklists5CRITICALArchitectural and code checklist items
test-automation-project6HIGHAutomation as software project, ROI
automation-approaches6HIGHGUI/​API, capture/​playback, data/​keyword-driven
specific-test-tools6MEDIUMFault seeding/​injection, perf, web, MBT, mobile