TL;DR
After taking state of the art software learning courses, I concluded that best way to comprehend knowledge is to learn by using examples of presented materials.
How to measure quality of a course or workshop? For me, one metric are examples used in course or workshop. Of course, not THE NUMBER of examples, but my subjective measure how examples helped me to understand theory. And what is more important, how those examples help me to remember what I learned.
My examples of such courses are Rapid Software Testing by Satisfice or BBST courses by AST foundation.
Today is SATURDAY and it was RAINY morning, and I drove to my hometown Zabok in EARLY morning. Security of my trip was jepordised on third stop light. Traffic lights were off. This was intersection with one direction road and intersection had road signs.
Should I wait for traffic lights be repaired? In that case, I will be late.
Since it was SATURDAY, EARLY RAINY morning, the traffic on the intersection was very light and it was intersection with one direction road, I crossed the intersection SAFER than on working day.
Ok, that was example, but what is the topic?
Your project is using a lot of 3rd party software components. Those components could have important security fixes. Deployment of new version for 3rd party component requires testing.
You are at YOUR crossroad with jeopardised security, this time of your product.
Should you upgrade? Will your sprint be late because of it? Do we need to deploy? Can project be secure enough without the patch?
This is security risk analysis for your product in the context of 3rd party component security fix. You need to create questions and answers in the context of your product and related to software security domain.
Can you give us any example?
