Gap Analysis

Question 1

Gap Analysis

Answer 1

Where you are compared with where you want to be. The “gap” between the two

Question 2

Choosing the framework

Answer 2

Work towards a known baseline. Determine the end goal.

Question 4

Evaluate people and processes

Answer 4

-Get a baseline of employees
1. Formal experience
2. Current training
3. Knowledge of security procedures and policies
-Examine the current processes
1. Research existing IT systems
2. Evaluate existing security policies

Question 5

Compare and contrast

Answer 5

-The Comparison
Evaluate existing systems
-Identify weakness
Along with the most effective processes
-A Detailed Analysis of
Examine broad security categories. Break those into smaller segments

Question 6

The Analysis and Report

Answer 6

-The final comparison
Detailed baseline objectives, and a clear view of the current state
-Need a path to get from the current security to the goal
This will most certainly include time, money, and lots of change control
-Time to create the gap analysis report
A formal description of the current state, recommendations for meeting the baseline