On this page6 sections
ConceptsBeginner5-7 min reference

SDLC & STLC

A reference for the two life-cycle frameworks every QA engineer is expected to know: SDLC (how the product gets built) and STLC (how the product gets tested). Useful for interview prep, planning meetings, and aligning across teams.

SDLC Phases

PhaseWhat happensKey artefactsQA involvement
Requirements AnalysisGather what the product should do, capture functional + non-functional needsBRD, FRD, user stories, acceptance criteriaReview for testability, flag ambiguity, draft the test approach
System DesignArchitecture, database schema, API contracts, UI wireframesDesign docs, ER diagrams, API specs, wireframesReview for risk, identify integration points, plan automation feasibility
Implementation (Coding)Developers build features against the designSource code, unit tests, code reviewsPair on tricky logic, write integration tests, do early exploratory testing on dev branches
TestingVerify the system meets requirementsTest plans, test cases, defect reports, RTMOwns this phase — system, integration, UAT, regression, performance, security
DeploymentRelease to staging then productionRelease notes, deployment runbookSmoke / sanity tests post-deploy, sign-off, monitor production canary
MaintenanceBug fixes, enhancements, patches over the product's lifetimePatch releases, change logsRegression suite per release, support reproduction, validate fixes

Key principle

QA is not a phase — it's a thread that runs through all six. The "Testing" phase is where formal verification concentrates, but shift-left moves QA activities earlier (review at requirements time) and shift-right moves them later (production monitoring and on-call rotation).

SDLC Models

ModelShapeTesting positionBest for
WaterfallSequential — each phase fully completes before the nextLate — testing starts after coding endsStable requirements, regulatory products, hardware-software co-development
V-ModelMirror of dev and test — every dev phase has a paired test phaseTest planning starts during requirements; test execution lateSafety-critical products (medical, automotive, aerospace)
IterativeBuild in chunks, refine each iterationContinuous within each iterationLarge products with evolving requirements
SpiralRisk-driven loops; each loop = plan, risk, build, testOngoing — prioritised by risk assessmentHigh-risk, large-budget projects
AgileShort sprints (1–4 weeks), incremental deliveryContinuous — every sprint includes testingMost modern web/SaaS products with changing priorities
DevOpsContinuous integration + continuous delivery; blurs build/test/deployContinuous testing in pipeline; production monitoringWeb platforms, microservices, anything that ships daily

V-Model — what each side maps to

Requirements ────────────────────── Acceptance Tests
   System Design ────────────── System Tests
       Architecture ────── Integration Tests
           Module Design ── Component Tests
               Coding

Reading top to bottom: dev work descends, then ascends back up through testing. Each test phase verifies the dev phase at its own level.

Agile vs Waterfall — at-a-glance

WaterfallAgile
Testing phaseOne block at the endEvery sprint
When QA startsAfter dev endsSprint planning
DocumentationHeavy, up-frontLight, just-in-time
Feedback to devsLong cycleSame-sprint
Change costHigh once dev startsBuilt into the model
Defect costIncreases dramatically lateStays cheaper because found earlier
Best forStable, well-known requirementsEvolving requirements, frequent releases

STLC Phases

The Software Testing Life Cycle — the QA-side mirror of SDLC. Six phases with explicit entry / exit criteria.

1. Requirement Analysis

Understand what's being tested before any test work starts.

Entry criteriaRequirements document available (BRD, FRD, user stories with AC)
ActivitiesReview requirements, identify testable scope, raise gaps and ambiguities, build the Requirements Traceability Matrix (RTM), identify automation candidates
DeliverablesReviewed RTM, list of clarification questions, automation feasibility report
Exit criteriaRTM signed off, all queries resolved, scope agreed

2. Test Planning

Define the strategy, scope, schedule, and resourcing.

Entry criteriaApproved requirements + RTM
ActivitiesWrite test strategy and test plan, estimate effort, pick tools, assign roles, plan test data and environments, define entry/exit criteria for execution
DeliverablesTest plan document, effort estimate, tool selection rationale, schedule
Exit criteriaTest plan reviewed and approved by stakeholders

3. Test Case Design

Turn requirements into executable test cases.

Entry criteriaApproved test plan, signed-off requirements
ActivitiesWrite test cases (positive, negative, edge), prepare test data, peer-review cases, link cases back to requirements in the RTM
DeliverablesTest cases, test data sets, test scripts (for automated cases), updated RTM
Exit criteriaAll cases reviewed and approved; coverage of every in-scope requirement confirmed in the RTM

4. Test Environment Setup

Stand up the infrastructure to execute against.

Entry criteriaTest plan, system design docs, deployment plan
ActivitiesProvision hardware/cloud, install OS + middleware + app, configure tools (CI, defect tracker, browsers, devices), seed test data, run smoke tests
DeliverablesConfigured test environment, smoke-test results, environment access info for the team
Exit criteriaEnvironment ready, smoke test passes, access verified

5. Test Execution

Run the tests, log defects, retest.

Entry criteriaTest cases ready, environment ready, build deployed and accepted via smoke test
ActivitiesExecute planned cases, log defects with reproduction steps, retest fixes, run regression after each major fix or new build, exploratory testing alongside scripted execution, daily status reporting
DeliverablesTest execution results, defect reports, updated RTM (executed status), daily/weekly status reports
Exit criteriaAll planned cases executed, defect counts within agreed thresholds (e.g. 0 critical, ≤ N high), regression clean

6. Test Closure

Wrap up the cycle, capture lessons.

Entry criteriaTest execution complete with acceptable defect metrics
ActivitiesVerify exit criteria met, prepare test summary report, document lessons learned, archive artefacts (test cases, defect reports, environment configs), retro with the team
DeliverablesTest summary report, lessons-learned doc, archived artefacts
Exit criteriaTest summary report signed off; lessons fed into next cycle's plan

Entry & Exit Criteria — Quick Reference

One table, all six STLC phases.

PhaseEntry criteriaExit criteria
Requirement AnalysisRequirements doc availableSigned-off RTM, queries resolved
Test PlanningApproved requirements, RTMTest plan approved
Test Case DesignApproved test planCases reviewed; full RTM coverage
Environment SetupTest plan, design docsEnv ready, smoke passes
Test ExecutionCases ready, env ready, build deployedAll cases run; defect metrics acceptable
Test ClosureExecution complete; metrics metTest summary report signed off

Test Deliverables by Phase

DeliverablePhase that produces itOwner
Test StrategyTest Planning (organisation-level, often before any specific project)QA Lead / Test Manager
Test PlanTest PlanningQA Lead / Test Manager
Requirements Traceability Matrix (RTM)Requirement Analysis (created), updated through all phasesQA team
Test Cases / Test ScriptsTest Case DesignQA team
Test DataTest Case DesignQA team
Environment Configuration DocumentEnvironment SetupDevOps + QA
Smoke / Sanity Test ResultsEnvironment Setup, Test ExecutionQA team
Defect ReportsTest ExecutionQA team
Test Execution Report (daily/weekly)Test ExecutionQA Lead
Test Summary ReportTest ClosureQA Lead
Lessons Learned DocumentTest ClosureQA team + stakeholders

Test Strategy vs Test Plan

A common confusion — they're different documents.

Test StrategyTest Plan
ScopeOrganisation-wide or product-line wideOne project / release
AudienceSenior management, multiple teamsThe project team
LifespanLong — updated yearly or rarelyShort — for the duration of one project
ContainsStandards, tools, policies, types of testing the org doesScope, schedule, resources, specific cases for this release
Example sections"We test on Chrome/Firefox/Safari", "We use Jira for defects", "We require code coverage ≥ 80%""Sprint 14 covers the checkout redesign; smoke + regression + visual"

The Test Plan inherits from the Test Strategy — it doesn't restate the org's standards, just references them.

QA Activities in Agile / Scrum

Agile compresses the STLC. Most phases happen continuously inside each sprint.

Per-sprint mapping

Scrum ceremonyQA activities
Backlog refinementReview upcoming stories for testability; flag missing acceptance criteria; raise risks; estimate testing effort
Sprint planningPull stories into the sprint with realistic test effort included; identify dependencies (env, test data, third-party); break stories into tasks
Daily standupTest progress per story; blockers (broken builds, env down, awaiting fix); fresh defects
Sprint review / demoDemo tested features; show coverage and defect metrics; gather feedback
Sprint retrospectiveProcess improvements: too much regression, slow builds, flaky env, automation gaps

Definition of Done — testing criteria

A story isn't "done" until everything below is true. Treat this as a checklist on the story card.

□ All acceptance criteria verified manually or via automation
□ Unit-test coverage meets team threshold (e.g. ≥ 80 %)
□ Integration tests passing in CI
□ End-to-end / regression suite passing
□ No open critical or high-severity defects
□ Performance budget met (if perf-sensitive)
□ Accessibility checks passed (WCAG AA)
□ Cross-browser / cross-device tested per matrix
□ Code reviewed and approved
□ Docs updated (user-facing, API, runbook)
□ Telemetry / logging in place

The Test Pyramid in Agile

The cost-and-coverage shape of an Agile test suite. Layers, ratios, and what each layer is good at:

LayerTypical shareSpeedOwnerWhat it catches
Unit~70 %ms each, run on every saveDevsLogic errors, regressions in pure functions, edge cases in calculations
Integration~20 %seconds eachDevs + QAComponent interactions, DB queries, API contracts
End-to-end~10 %tens of seconds eachQAReal user flows, deploy correctness, browser-specific bugs

Anti-patterns to avoid:

  • Ice-cream cone — heavy E2E, light unit. Slow, brittle, expensive to maintain.
  • Hourglass — many unit + many E2E, almost no integration. Big behavioural gaps that don't show up until production.

Three Amigos meeting

When a story is unclear, get a developer, a tester, and a product person together (the "three amigos") to walk through it. The tester's role is to ask "what could go wrong?" and "what's the acceptance criteria for that case?" until the story is concrete enough to estimate.

Shift-left and shift-right

MeansExamples
Shift-leftMove QA work earlier in the cycleReviewing requirements, writing acceptance tests before code, pairing on PRs, contract tests at design time
Shift-rightExtend QA into productionSynthetic monitoring, real-user metrics, feature flags + gradual rollout, on-call rotation, chaos engineering

A mature Agile QA practice does both — find issues earlier and learn from production.