Been to a meeting recently where in the testing process was being demonstrated. Out of sheer curiosity, I popped a question of what defines success or failure in their system… and the answer became a 15 minute long Q&A sessions rather than being an quality assurance process.
My view is that quality assurance is a matter of ascertaining the overall stability and security of a system
This can be achieved simply by listing out all your function points and measuring the success in binary as ‘0’ & ‘1’.