Which of the following subsystems, based on the risk scores of the table, is most risky?

You are managing the system testing for a SOA based system. The integrated system consists of several subsystems:

– A SOA middleware

– A CRM (Customer Relationship Management) system

– A BRM (Billing and Revenue Management) system

– A SMS (Subscriber Management System) system and you performed a risk analysis based on these subsystems.

At the end of the scheduled period for test execution you produce a first classical report based on the traditional metrics of testing. Test pass/fail status and bug status (open/resolved) That table provides you a distorted picture of the quality risk, because there is no indication of the risk level of the failed tests, the tests not run, or the open bugs. Thus, you produce the following table to solve this distortion issue:

In the table above, where you have introduced the concept of risk weighting, the highest risk test or bug report has a score of 1, while the lowest risk test or bug report has a score of 0.04.