Test plan vs test strategy
A test strategy is the standing document that says how an organisation tests: which levels and types of testing it does, which tools, which standards for entry, exit and defect handling, written once and changed rarely. A test plan is the document for one release or project that applies the strategy to a scope: what will be tested, by whom, where, when, and against which criteria.
The longer version
The strategy answers the questions that do not change between releases. It names the test levels the organisation runs, the types it insists on (regression before every release, accessibility on every public page), the tooling, the environments, the defect severity scale and the rules for who signs off. It is owned by whoever leads quality across teams and is read when a project starts or a tester joins. The plan answers the questions that do change: the features in scope for this release, the ones deliberately out, the people assigned, the schedule, the environments booked, the risks specific to this build, and the entry and exit criteria for each phase.
The two are confused because small teams keep one document that does both jobs, and because templates for the plan include the strategy's sections. The distinction is shelf life. A paragraph saying regression is run against the full suite before each release belongs in the strategy and is inherited by every plan; a plan that repeats it for every release is copying. A paragraph saying the payments refactor is the highest-risk area and gets exploratory testing on top of the scripted cases belongs in this release's plan and would be wrong in the next one.
A merged document hides one half or the other. A plan that carries the whole strategy is long, and the release-specific content, the scope and the risks, is buried on page nine where nobody reads it. A strategy that is never written leaves every plan to reinvent the severity scale and the sign-off rules, and two releases run by two leads are tested differently for no reason. The test for any paragraph is whether it would change if the release changed: if so, it belongs in the plan.
Common questions
What is the difference between a test plan and a test strategy?
A test strategy is the organisation's standing approach: levels, types, tools, severity scale, sign-off rules, written once. A test plan is the document for one release: scope, people, schedule, environments, risks and the entry and exit criteria for each phase. The strategy is inherited by every plan; the plan applies it to one piece of work.
Which comes first, the test plan or the test strategy?
The strategy, because the plan applies it. In practice many teams write their first plan before any strategy exists and extract the strategy afterwards, by moving the paragraphs that would be identical in the next plan into a separate document. Either order works as long as the release-specific content ends up in the plan.
Who writes the test plan and who writes the test strategy?
The strategy is written by whoever leads quality across the organisation, a QA manager or head of engineering, and reviewed rarely. The plan is written by the test lead for that release, agreed with the development lead and the product owner, and it is the document a project manager reads to know what testing will take and when it ends.
How often should a test strategy be updated?
Rarely, and on a trigger rather than a schedule: a new test level is introduced, the tooling changes, the severity scale is revised, or a release reveals that two teams have been testing differently. A strategy edited every release has plan content in it. A plan is revised whenever its release changes scope, people or dates, which is often.
Does a small team need both a test plan and a test strategy?
A small team needs the content of both and can keep it in one document, provided the standing sections and the release-specific sections are kept apart. The standing part, levels, tools, severity scale and sign-off rules, is written once and left alone; the per-release part, scope, people, dates and risks, is rewritten each time. Splitting the file becomes worthwhile when a second team starts copying it.
Bug reports that arrive ready to triage.
Collect replay, console, network and browser context with the Free plan.