Gap Analysis

Question 1

What is Gap Analysis?

Answer 1

Process of evaluating the differences between an organization’s current performance and its desired performance

Question 2

Gap Analysis Tool

Answer 2

• Valuable tool for organizations looking to improve their operations, processes, performance, or overall security posture.
• A powerful tool that can help organizations to improve their security and their performance by identifying areas where improvements can be made.

Question 3

Steps involved in Gap Analysis

Answer 3

Define the scope of the analysis.
Gather data on the current state of the organization.
Analyze the data to identify any areas where the organization’s current performance falls short of its desired performance.
Develop a plan to bridge the gap.

Question 4

2 Basic type of Gap Analysis

Answer 4

Technical Gap Analysis
Business Gap Analysis

Question 5

Plan of Action and Milestones (POA&M)

Answer 5

Outlines the specific measures to address each vulnerability
Allocate resources
Set up timelines for each remediation task that is needed