Start with the question the strategy must answer
An automation strategy exists to answer one question from the people paying for it: which manual effort goes away, when, and what replaces it. If the document cannot show a regression suite that currently takes 3 testers 4 days and will take 40 minutes on a build agent by the end of quarter two, it is a tooling plan, not a strategy. Write the current cost first. Count the regression cycles per month, the tester days per cycle, and the defects those cycles have caught in the last two quarters. Those three numbers are the baseline every later claim is measured against, and they belong in the same place as your overall test strategy.
The second question is scope. A plan to automate everything has no goal in it. The scoring method below forces a ranked list, and a ranked list is what turns a strategy into a backlog.
Score candidates before writing a line of code
Take every regression area you run today and score it on four axes, each from 1 (low) to 5 (high). Frequency: how often the area is retested in a quarter. Stability: how rarely its interface changes; a screen redesigned every sprint scores 1. Risk: the business impact of a defect escaping, taken from the product risk assessment if one exists. Manual cost: tester hours per full manual run. Add the four. Areas scoring 12 or higher are automation candidates now. Areas from 8 to 11 wait for the second half of the year. Under 8, leave manual and revisit in six months.
| Area | Frequency | Stability | Risk | Manual cost | Score |
|---|---|---|---|---|---|
| Checkout and payment | 5 | 4 | 5 | 4 | 18 |
| Login and session | 5 | 5 | 4 | 2 | 16 |
| Search and filters | 4 | 3 | 3 | 3 | 13 |
| Reporting exports | 2 | 3 | 3 | 1 | 9 |
| Admin settings | 2 | 2 | 2 | 1 | 7 |
| Marketing pages | 3 | 1 | 1 | 1 | 4 |
The table does the arguing for you. Marketing pages are tested often, so someone will propose automating them, but the interface changes weekly and a defect costs almost nothing, so the score is 4. Checkout scores 18 because every axis points the same way. In a real scoring session expect 15 to 25 areas; the top third is your first two quarters.
Pick an ownership model and write it down
Three models work. Which one you pick matters less than making it explicit, because unowned automation rots within two release cycles.
- Central automation team. Three to five engineers own framework and tests. Fast to start, easy to standardize, and a bottleneck by month nine when feature teams queue for coverage. Suits organizations with under six delivery teams.
- Embedded in feature teams. Every team writes and maintains its own tests. Coverage tracks the code, but frameworks fork and the fourth team reinvents the login helper. Suits teams that already share a code review culture.
- Platform plus product. A two or three person platform group owns the framework, test infrastructure, reporting and flaky test triage; feature teams own every test that exercises their feature. This is the model most programs settle on eventually. Start there.
Whatever the model, put the answer to one question in the strategy: when a test fails at 02:00, who is paged, and who decides by 09:00 whether the release is blocked?
Environments and test data decide your run time
Automation is limited by environments long before it is limited by test code. A suite of 600 UI tests that takes 3 hours serially takes 25 minutes on 8 parallel streams, but only if each stream has an isolated environment or an isolated data partition. Budget for that up front: one environment per stream, provisioned from configuration in under 10 minutes, torn down after the run. Shared, long-lived test environments are where order dependence and flaky tests are born.
Test data needs the same discipline. Decide per area whether tests create their own data through an API before each run (preferred for anything transactional), load a versioned seed set (acceptable for reference data), or read from a shared anonymized copy of production (acceptable only for read-only checks). Write the decision into the strategy, because the data approach sets your maintenance cost for years.
Reporting: one dashboard, three numbers
The strategy should commit to a single report that anyone can open. It shows three numbers per suite: pass rate over the last 20 runs, median run duration, and the percentage of failures that turned out to be real defects. The third one is the honest measure of value. If under half of red runs point at a product defect, the suite is costing more attention than it returns and the next quarter is a maintenance quarter. Tie the dashboard into the wider metrics set rather than inventing new ones, and report coverage in terms of risk areas covered, not test count.
The 12-month roadmap by quarter
- Quarter one: foundation. Framework chosen through a two week bake-off, one environment provisioned from code, the two highest scoring areas automated end to end, results visible on every pull request. Success measure: the top two areas need zero manual regression by week 12.
- Quarter two: breadth. Every area scoring 12 or higher is covered. API tests added beneath the UI tests so each UI scenario has at most one UI test and several API tests behind it. Success measure: manual regression effort down by half against the baseline.
- Quarter three: speed. Parallel streams, test selection by changed component, a flaky test quarantine with a 14 day limit. Success measure: full suite under 30 minutes, commit stage under 10.
- Quarter four: prune and hand over. Delete tests that have not failed for a real reason in six months and duplicate lower cost tests. Move ownership of feature tests to feature teams if it is not there already. Success measure: failure-to-defect ratio above 60 percent, and a written strategy for year two.
What not to automate
Saying no in writing protects the program from the loudest request in the room. Leave these manual and say why in the strategy.
- Anything run fewer than 3 times a year. The maintenance cost exceeds the execution cost before the second run.
- Interfaces that change every sprint. Wait until the design settles; automate the API underneath in the meantime.
- Exploratory work. Exploratory testing finds the defects scripts cannot; automation frees time for it rather than replacing it.
- Visual and usability judgment. A screenshot comparison catches layout breaks; it does not tell you the page is confusing.
- One-off migration checks and data reconciliations. Script them as throwaway queries, not as suite members.
If a test will run fewer than 20 times over its lifetime, or if you cannot name the person who fixes it when it breaks, do not automate it yet.
Common questions
How do I calculate automation ROI?
Baseline the manual regression cost in tester hours per month. Estimate the build cost (engineer hours) and the run cost (maintenance hours per month plus infrastructure). Payback month is build cost divided by monthly saving. At three releases a month with a two day manual regression, most teams pay back a well scoped suite in 6 to 9 months. Include the value of faster feedback only as a secondary argument, because it is harder to defend.
Should testers or developers write the automated tests?
Both, with a split. Developers own unit and component tests as part of the definition of done. Testers and automation engineers own API, contract and end-to-end tests, and pair with developers on testability. A tester who cannot read the code will write brittle tests; a developer who never talks to a tester will automate the happy path only.
How much of the regression suite should be automated?
Aim for the top two thirds by score, not a percentage of test cases. In practice that is 60 to 80 percent of regression execution effort automated and the rest deliberately manual or exploratory. Programs that report 100 percent are usually counting scripted checks that no longer find anything.
What is the biggest reason automation programs fail?
Nobody owns the failures. A suite goes red, the team stops trusting it, and within a quarter it is ignored or switched off. Ownership, a quarantine policy and a failure-to-defect metric prevent that more reliably than any framework choice.
How often should the strategy be revised?
Review the scoring table every quarter and the ownership and environment decisions once a year. Rescore any area whose interface changed materially. The roadmap for the following year is written in quarter four using the year's actual numbers.
Where does the automation strategy sit relative to the test strategy?
Beneath it. The test strategy decides levels, types and risk priorities; the automation strategy decides which of those are executed by code, by whom, and on what infrastructure. Keep them as separate documents with the automation strategy referencing the risk assessment rather than repeating it.
Sources
- Jez Humble and David Farley, Continuous Delivery: test automation foundations
- DORA research program, capability: test automation
- Ham Vocke, The Practical Test Pyramid (martinfowler.com)
Further reading named in the text
- Mark Fewster and Dorothy Graham, Software Test Automation (Addison-Wesley, 1999)
- Dorothy Graham and Mark Fewster, Experiences of Test Automation (Addison-Wesley, 2012)
- ISO/IEC/IEEE 29119-2, Software and systems engineering, Software testing, Part 2: Test processes (ISO, 2021)
- Lisa Crispin and Janet Gregory, Agile Testing: A Practical Guide for Testers and Agile Teams (Addison-Wesley, 2009)
This guide is part of the test automation hub. It is best read alongside test automation pyramid and continuous testing, which cover the neighbouring questions.