What is Gap Analysis
Evaluating differences between organization’s current performance and its desired performance
What is goal of Gap Analysis?
Finding fields of improvements
What are steps of GA?
1 Define Scope, 2 Gather Data, 23 Analyze Data, 4 Identify Gaps, 5 Develop a plan to fill gap
What are types of GA?
Technical and BusinessTe
Technical Gap Analysis
Evaluating organization’s current technical infrastructure and identifying any areas where it falls short on the technical capabilities required to fully utilize their security solutions
Business Gap Analysis
Evaluating organization’s current business procedures and identifying any areas where it falls short on the capabilities required to fully utilize their (e.g. cloud) solutions
What is POA&M
Plan of Action and Milestones. Outlines measures to address each vulnerability, allocate resources, set up timelines for each remediation task that is needed