{Managing and assessing the risk of component upgrades}