From the course: CompTIA Security+ (SY0-701) Cert Prep: 1 General Security Concepts

Unlock the full course today

Join today to access over 23,200 courses taught by industry experts.

Conducting a gap analysis

Conducting a gap analysis

From the course: CompTIA Security+ (SY0-701) Cert Prep: 1 General Security Concepts

Start my 1-month free trial Buy for my team

Conducting a gap analysis

“

The gap analysis is one of the core strategic planning tools available to cybersecurity programs, and it's crucial knowledge for information security professionals. The basic concept behind a gap analysis isn't very complicated. You need to begin with two things. First, you need to know the desired state of your information security program. What controls would you like to have in place to meet your security objectives? This desired state can take multiple sources of requirements into account. Some of your requirements will come from your own internal information security policies. For example, you might have policy statements that sensitive information should be encrypted at rest and in transit, and that systems containing sensitive information must be protected with multifactor authentication. These internal requirements form one basis for the organization's desired security state. Other requirements might come from outside your organization. You might have regulatory requirements…

Contents