thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Foundational

Gap Analysis

Comparison of current state with a desired state or requirement to identify deficiencies and actions.

Definition

Gap analyses compare existing controls, processes, or maturity to a framework, regulation, or target profile. Results drive remediation roadmaps and budgets. They are common precursors to certification and compliance programs.

Example

A gap analysis against ISO 27001 finds missing supplier security agreements and an incomplete risk register.

Exam tip

On CISM, a gap analysis typically follows defining the desired state.

Related terms