Technique · Code review

Review question checklists

A fixed bank of questions a reviewer must answer for a kind of change, ranked so the most relevant ones are asked first.

Sub-techniques

Universal questions V1040.001

Questions that apply to any change: error handling, tests, naming.
Behavioural questions V1040.002

Questions about what changes for users and callers.
Security requirement checklists V1040.003

Verification requirements per area from a standard such as OWASP ASVS.