Section 2.15 Gap Analysis

Question 1

Gap Analysis

Answer 1

Process of evaluating the differences between an organisations current peformance and its desired peformance

Question 2

Why is conducting Gap Analysis important?

Answer 2

Strengthen the overall security posture of an organisation

Question 3

how to conduct one (4 brief steps)

Gap Analysis steps

Answer 3

1. Define the scope
2. Gather data on the current state
3. Analyse the data to identify areas of weakness
4. Develop a plan of to bridge the gap

Question 4

2 Basic types of Gap Analysis

Answer 4

1.Technical Gap Analysis - Assesing the technical infrastructure

2. Business Gap Analysis: Assessing business processes

Question 5

Plan of Action and Milestones (POA&M)

Answer 5

Outlines the specific measures to address each vulnerability with timelines and resources