Test Management and Tools
Test management is the part of testing that plans the work, follows its progress, steers it when reality departs from the plan and closes it with a report. The ISTQB Foundation syllabus v4.0 describes the test management role as focused mainly on three activities of the test process: test planning, test monitoring and control, and test completion. A test management tool is the software where the records of those activities live: test cases, plans, runs and results, linked to requirements and defects.
Example: three testers work on a clinic booking app that is released every month. In their tool each release has a plan, each build gets a run, a failed step opens a linked defect in the issue tracker, and on release day the lead reads a report that shows, per user story, the latest results of its tests and its open defects. The lessons on traceability and QA documentation decided what to record; this one shows where the records live and how a tool turns them into answers.
Why it matters
Without a shared record, test management breaks down as soon as a team has several testers or a release has several builds. Results sit in personal spreadsheets, nobody can say which build a "pass" belongs to, status reports take hours to assemble and are out of date when sent, and the release meeting argues about numbers instead of risks.
A tool does not repair a weak process, but a well-set-up one makes the process visible: progress, coverage and blockers can be read at any time, history survives people leaving, and an auditor can see who ran what on which build. A badly set-up one can be worse than a spreadsheet, because stale cases and unmapped results produce confident dashboards that are wrong. Knowing how the tool computes its answers is part of the tester's job.
Test management activities and what a tool records for each
In ISTQB terms test management is a role rather than a job title: it takes overall responsibility for the test process and focuses on three activities that frame analysis, design, implementation and execution. ISO/IEC/IEEE 29119-2 groups the same three as its test management processes. In agile teams the team itself handles some of these tasks.
Two supporting disciplines serve all three. Configuration management identifies and versions testware and test items, so every result names its exact build and environment and every test case has a history; an item approved for testing becomes a baseline that changes only through change control. Defect management moves each reported anomaly through an agreed workflow from discovery to closure. Each activity, and what a tool records for it:
- Test planning: set the objectives, scope, approach, entry and exit criteria, resources and schedule. In a tool: a plan per release, the suites and requirements in scope, cycles and assignments.
- Test monitoring: gather information continuously to compare progress with the plan and check the exit criteria. In a tool: live counts of results, coverage per requirement and linked defects.
- Test control: act on what monitoring shows. The syllabus examples are reprioritising tests when a risk becomes an issue, re-checking entry or exit criteria after rework, adjusting the schedule when an environment arrives late and adding resources when and where needed. In a tool: changed priorities, reassigned tests, a new run for a new build.
- Test completion: at a milestone such as a release or the end of an iteration, consolidate results, archive or hand over useful testware, record lessons learned and write the test completion report. In a tool: a closed cycle, the final report export, open defects carried forward.
What a test management tool does, whatever the product
The syllabus lists management tools among the kinds of tool support for testing: they make the test process more efficient by helping to manage the SDLC, requirements, tests, defects and configuration. It also counts a spreadsheet as a test tool. Products differ in names and screens, and this lesson recommends none of them; look for capabilities, not brands.
Choose from your process, not from a feature list: write down how the team plans, runs, links and reports, list the reports stakeholders really need, and try a short list of tools on one real release. The capabilities to look for:
- Test repository: test cases with ids, preconditions, steps, expected results, priority and owner, grouped into suites, with shared steps, parameters and a version history.
- Planning and execution: plans or cycles per release, runs per build and environment, assignment to testers, and step-by-step results with evidence attached.
- Integrations: requirements and defects usually stay in the team's issue tracker and are linked, not copied; automated results arrive from CI, commonly as a JUnit XML report, and are mapped to test cases.
- Traceability and reporting: links between requirements, tests, results and defects, and the progress, coverage and defect reports computed from them.
- Administration: roles and permissions, an audit trail of who changed or executed what, custom fields and review workflows, import, export and an API.
Each layer is built from the records below it
- 1Reports and dashboardsProgress, coverage per requirement, defects by status, the completion report export
Only as true as the layers below
- 2Traceability linksRequirement, test case, result and defect, linked by fields on each record
Recorded when tests are written, not just before a release
- 3Plans, cycles and runsA plan per release, a run per build and environment, step results with evidence
A new run for every build
- 4Test repositoryTest cases and suites with ids, steps, expected results and version history
Changes with the product
- 5Connected sourcesIssue tracker (requirements, defects), CI pipeline (automated results as JUnit XML), build versions
Linked, not copied
Generic capabilities: names and screens differ between products, and none is implied. Conventions for ids, statuses, fields and permissions are agreed before the first import.
Traceability and reporting in a tool
In the requirements traceability lesson the links lived in a matrix. In a tool each link is a field on a record: a test case names the story or requirement it covers, a result belongs to a run that names its build and environment, and a defect is linked to the failed result. The matrix becomes a report the tool generates, current the moment a result is recorded.
Every report is a query over those records, so learn the rules behind a report before you present it, and agree them with the team. The counting rules from the execution reporting lesson still apply:
- Scope: which release, build and environment. A pass on last week's build says little about today's.
- Latest result: when a test ran several times in scope, the latest result usually counts; a fail followed by a pass on the same build is a question to investigate, not a pass.
- Requirement status rule: for example, passed only when every linked test passed in scope and no linked defect of severity Major or higher is open; not covered when nothing is linked.
- Mapping: automated results count only when they are mapped to test cases; unmapped results are invisible to coverage.
- Export: keep the data behind a dashboard, for example as CSV, for the completion report and audits.
Worked example: reading a release coverage report
Sahl Clinics (fictional) is an appointment booking app. Release 4.2 has five user stories and 38 linked test cases. Most are run manually on staging; the API tests are automated, and their JUnit XML results are imported from CI and mapped to their test cases. On the morning of the go/no-go meeting the lead exports the coverage report for the release candidate:
- The headline pass rate is 97% (33 passed of 34 executed), yet only BK-101 is ready. Read by story, not by total.
- BK-104 has no linked tests. Either tests exist but were never linked (search the repository and any unmapped CI results) or the SMS reminder was never tested. Only coverage computed from links reveals this.
- BK-102 failed and D-311 is open: triage and the product owner decide whether to fix and confirm on the next build or to release with an accepted, recorded risk.
- BK-103 is blocked by D-308. Blocked means not tested: an unknown risk, never a pass.
- BK-105 has one test not run: run it today or record why not.
- The control actions go into the tool as well: new assignments and a run for rc4 from the same suite, so the rc3 results stay the record. The final export becomes an appendix of the test completion report.
Requirements coverage: release 4.2, build 4.2.0-rc3, staging
Counting: latest result of each test in this scope
Story status: Passed = every linked test passed and no linked defect
of severity Major or higher is open
Story Summary Tests Pass Fail Blocked Not run Defects Status
BK-101 Book an appointment 12 12 0 0 0 - Passed
BK-102 Free cancellation 8 6 1 0 1 D-311 Failed
BK-103 Reschedule 6 4 0 2 0 D-308 Blocked
BK-104 SMS reminder 0 - - - - - Not covered
BK-105 Staff calendar view 12 11 0 0 1 - In progress
Total 38 33 1 2 2Common mistakes
- Setting up the tool before the team has agreed its process: ids, statuses, fields and the reports it needs. The tool then imposes a workflow that nobody follows.
- Importing every old spreadsheet case without review, so the repository starts full of duplicates and tests for removed features.
- Copying requirements and defects into the test tool instead of linking to the tracker, which creates two versions of the truth.
- Leaving automated tests unmapped, so coverage reports ignore most of the testing that actually runs.
- Presenting a dashboard without knowing its scope and counting rule: results from older builds, blocked tests hidden in a pass rate, a rerun that turns a failure into a pass.
- Treating the tool as test management. It records plans and decisions; deciding scope, priorities and release risk is still people's work.
The QA perspective
On many teams the tester is the tool's daily user and often its informal administrator. Agree the conventions early and write them on one page: where requirements and defects live, the id format, which statuses exist and what each means, how automated tests are named or tagged so they map to test cases, and who may change an approved case. Review them at retrospectives.
Use the tool to answer questions, not to produce numbers. Before a status meeting, check the report's scope and rule, read it by requirement and bring the two or three decisions it shows. Make sure the history of what was tested on which build can be exported: it belongs to the product, not to a vendor.
Practice exercise
Compute release status from raw tool records
A library app is about to release version 3.1. The test tool holds the records below for the target build 3.1.0-rc2. Work out each story's status as the tool would compute it with the stated rule, and the headline pass rate a dashboard would show.
Then find what that computed view hides, list your control actions and write a one-line status per story for the go/no-go meeting.
Library app, release 3.1. Target build: 3.1.0-rc2 on staging.
Rule: a story passes when every linked test passed on rc2 (latest result
counts) and no linked defect of severity Major or higher is open.
Stories: LIB-11 Borrow a book LIB-12 Reserve a book
LIB-13 Renew a loan LIB-14 Pay an overdue fine
Results in the order they were recorded:
# Test Story Build Result Note
1 TC-01 LIB-11 rc1 passed
2 TC-02 LIB-11 rc1 failed D-77 (Major) raised
3 TC-01 LIB-11 rc2 passed
4 TC-02 LIB-11 rc2 passed D-77 fix confirmed
5 TC-03 LIB-12 rc1 passed
6 TC-04 LIB-12 rc2 blocked D-80 (Major) open
7 TC-05 LIB-13 rc2 failed D-81 (Critical) open
8 TC-05 LIB-13 rc2 passed rerun on the same build
9 api/renew-overdue-loan - rc2 failed automated (CI), not mapped- For every linked test, keep only its latest result on rc2; a test with no rc2 result is not run.
- Apply the rule to each story, including its linked defects, and compute the dashboard's headline pass rate.
- List what the computed view hides or gets wrong: scope, reruns, unmapped results, stories without tests.
- Write the control actions and a one-line status per story for the go/no-go meeting.
Show the model answer
Latest results on rc2: TC-01 passed, TC-02 passed, TC-04 blocked, TC-05 passed (the rerun), TC-03 not run (its pass was on rc1). The dashboard shows 3 passed of 3 executed, a 100% pass rate, with 1 blocked and 1 not run. The failed automated test is missing because it is not mapped.
By story: LIB-11 passed, once D-77 is closed in the tracker (otherwise the rule still sees an open Major defect). LIB-12 not passed: TC-03 not run on rc2 and TC-04 blocked by D-80. LIB-13 failed: D-81 (Critical) is open, whatever the latest result says. LIB-14 not covered: no linked tests. One story of four is ready, behind a 100% pass rate.
What the tool view hides: a report scoped to all builds would count TC-03 as passed; "latest result counts" turns the fail-then-pass of TC-05 on the same build into a pass, which points to an intermittent defect or a flaky test; the CI failure is invisible until mapped; and LIB-14 shows nothing alarming unless the report lists stories without tests.
Control actions: check that D-77 is closed in the tracker now that its fix is confirmed; run TC-03 on rc2; ask triage for a decision on D-80; reproduce D-81 and investigate the TC-05 flip before trusting it; map api/renew-overdue-loan (its name points to LIB-13; confirm with its author); write tests for LIB-14, for example with Requirements → Test Cases, or record why it is not tested; set the report scope to rc2.
Status for the meeting: "LIB-11 ready. LIB-12 not tested on rc2, blocked by D-80. LIB-13 failing, Critical D-81 open. LIB-14 untested. Recommendation: not ready; decisions needed on D-80, D-81 and LIB-14 coverage."
Frequently asked questions
Do we need a dedicated test management tool, or is a spreadsheet enough?
A spreadsheet can be enough for one tester and a small product, and the ISTQB syllabus counts it as a test tool. It struggles when several people execute at once and when you need a result history per build, links to requirements and defects that stay current, and an audit trail. Move when assembling reports by hand or the risk of losing history costs more than the tool.
Should test management live inside the issue tracker or in a separate tool?
Both set-ups are common. Keeping requirements and defects in the team's tracker and linking tests to them avoids copies, whether the tests live in a tracker add-on or in a separate tool. Decide on the integrations and reports you need, not on where the screens are.
Which test management tool is the best?
No tool is best for everyone, and this lesson recommends none. Compare products against your process, the reports your stakeholders need, integration with your tracker and CI, permissions and audit needs, cost and export, then decide after a pilot on a real release. The ISTQB Foundation syllabus warns, for test automation tools, of risks that apply here too: unrealistic expectations, underestimating the effort to introduce and maintain a tool, and depending on a vendor that may retire or sell the tool or support it poorly.
Is test management only the test manager's job?
No. ISTQB treats test management as a role whose tasks depend on the context, and in agile teams the team handles some of them. A tester monitors progress, raises the need for control and contributes to test completion, with or without the title.
References
- ISTQB Certified Tester Foundation Level (CTFL) v4.0The foundation syllabus of software testing: test levels and types, test design techniques, test management and tools.
- ISO/IEC/IEEE 29119-2:2021 — Software and systems engineering — Software testing — Part 2: Test processesThe test process model: organisational, test management and dynamic test processes, with their activities and outcomes.
- Certified Tester Advanced Level Test Management (CTAL-TM) v3.0ISTQB's advanced syllabus on managing testing: test planning and estimation, risk-based testing, monitoring, metrics and reporting.
Practise with Mutqan tools
Convert a list of numbered requirements into traceable test cases with a requirement-to-test matrix.
Calculate percentages, percentage change, increase/decrease and what percent X is of Y.
Pretty-print XML with configurable indentation, and minify it back.
Convert an array of JSON objects to CSV with flattened nested keys.
Convert CSV and TSV files to PDF tables in your browser: delimiter detected, header row repeated on every page, landscape chosen automatically for wide tables.
Go deeper
Your progress on this topic
Not started
Mark the topic complete when you have studied it and done the exercise.
Sign in to track your progress
Mark topics complete, continue where you left off and unlock specialisation exams.