There is a clear distinction in white box testing, between “testing” and “analysis”. I think this distinction is important to call out. On the one hand, we have tests, which are defined as:
any activity which results in a binary pass/fail result.
We also have analysis, which does not fulfill the above requirement but must nonetheless be performed. These activities include:
- code coverage analysis
- static code analysis
- dynamic code analysis
- performance analysis
When examining the work and expected deliverables of a QA team, it’s important to remember that the second group of items above is not testing, and will return no pass/fail status. The fact that it does not means that it is fundamentally different from tests, and needs to be reported to management in its own way, separate from test results.
