← Security+ glossary

Gap analysis

A process that compares the current state of security against a desired target state, usually defined by a standard or framework (e.g. ISO 27001, NIST). It is often the first step of a security project because it reveals the difference between 'where we are now' and 'where we need to be'.

All Security+ guides →