Specification By Example (SBE)

A team-based way to discover and describe requirements and business-focused functional tests by capturing concrete, real-world examples instead of vague, abstract statements.

Key Points

  • Stakeholders, product owners, developers, and testers collaborate to build a shared understanding.
  • Concrete examples are turned into acceptance criteria and often automated tests.
  • Using real cases reduces ambiguity, uncovers edge conditions, and cuts rework.
  • Creates living documentation and commonly aligns with BDD and Given-When-Then formats.

Example

An e-commerce team must implement a returns policy. They workshop examples with the business: "Item returned within 30 days with receipt: full refund," "31-60 days: store credit," "After 60 days: no refund." These examples become the acceptance criteria and automated tests for the returns feature, ensuring everyone shares the same understanding of the rules.

PMP Example Question

On an agile project, stakeholders are frequently confused by abstract requirements for pricing discounts. What technique should the team use to clarify expectations and derive acceptance tests?

  1. Specification By Example (SBE)
  2. Critical Path Method (CPM)
  3. Wideband Delphi
  4. Earned Value Management (EVM)

Correct Answer: A — Specification By Example (SBE)

Explanation: SBE uses concrete, real-world examples to define requirements and acceptance tests, reducing ambiguity and aligning stakeholders.

ICS/OT Cybersecurity Fundamentals — Security Built for Industrial Systems

Industrial control systems cannot be secured like ordinary IT. A forced reboot, aggressive scan, or incompatible patch can interrupt production and create real safety consequences. Effective OT security begins with understanding the systems, constraints, and risks unique to industrial environments.

This course gives IT professionals, engineers, operators, and security practitioners a practical foundation in ICS threats, zone and conduit design, risk assessment, passive asset visibility, and vendor evaluation. You will learn how IEC 62443, NIST CSF, and MITRE ATT&CK for ICS apply where availability and safety come first.

Eight reconstructed incidents—including Stuxnet, Triton, Ukraine 2015, Colonial Pipeline, and PIPEDREAM—show how attackers move through OT environments, what they target, and which defenses could have changed the outcome.

Watch the course preview, then build the vocabulary, frameworks, and judgment needed to take credible first steps in ICS/OT cybersecurity.

Explore the Course


ICS/OT Cybersecurity Fundamentals course preview

Lead with clarity, influence, and outcomes.

HK School of Management offers a practical Leadership for Project Managers course for real projects, tight deadlines, and cross-functional teams. Learn to set direction, align stakeholders, and drive commitment without relying on title. Practical skills, tools, and guidance you can apply right away. Covered by Udemy's 30-day refund policy.

Learn More