Most test plans I’ve seen start with scope before talking about risks. Here’s what we’ll test, here’s what we won’t. Which is fine, except it skips the question that actually drives all of it: what are the risks we’re trying to protect against? I write sprint-level test plans one per sprint, covering everything QA is...