Static analysis analyzes program code without executing it - examining source code for defects, vulnerabilities, and compliance issues. It does not analyze batch programs (that could be dynamic). It is not about reviewing test plans or using black box testing. Static analysis = examining code statically, as opposed to dynamic analysis which executes code.