Regulatory Frameworks & Compliance Flashcards
7 cards from real Software Testing practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Regulatory Frameworks & Compliance flashcards as text
In DO-178C (airborne software testing), what does the term 'structural coverage analysis' primarily verify?
Answer: That test cases exercise the required code structure at the appropriate level
Structural coverage analysis in DO-178C ensures test cases adequately exercise code structure (statement, decision, or MC/DC coverage) based on the software level.
Under Sarbanes-Oxley (SOX) Section 404, what must software testers help verify regarding financial reporting systems?
Answer: That internal controls over financial reporting are effective
SOX Section 404 requires testing and attestation that internal controls over financial reporting are adequate and functioning effectively.
What is 'traceability' in the context of compliance testing, and why is it required?
Answer: Linking requirements to test cases to demonstrate coverage of compliance needs
Traceability links requirements to test cases and results, providing auditable evidence that all compliance requirements have been tested.
A banking application is being tested for ADA (Americans with Disabilities Act) compliance. Which testing type is MOST relevant?
Answer: Accessibility testing
Accessibility testing verifies that software can be used by people with disabilities, which is required for ADA compliance in digital services.
Under IEC 61508 (functional safety), what does SIL (Safety Integrity Level) determine in a testing context?
Answer: The rigor and thoroughness of testing techniques required for the system
SIL levels (1-4) dictate which testing techniques are mandatory or highly recommended, with higher SIL requiring more rigorous validation methods.
Which document is typically required in FDA-regulated software projects to demonstrate that the testing approach is fit for purpose before testing begins?
Answer: Validation protocol
A validation protocol pre-defines the testing approach, acceptance criteria, and responsibilities to be approved before execution begins.
In GDPR compliance testing, what does a 'right to erasure' (right to be forgotten) test verify?
Answer: That the system completely removes a user's personal data upon valid request
Right to erasure testing verifies that the system can identify and permanently delete all instances of a user's personal data across all storage locations.