Gap Assessment

Gaps against the framework, regulation or internal rules you choose.

Includes: Gaps by priority

Assesses your current state against the requirements you choose (ISO 27001, GDPR, NIS2, internal rules, contractual clauses or another standard) for the objective and scope you set, then lists prioritised gaps.

Columns of the register

FrameworkRequirementCurrent stateGapPriorityRecommended actionOwnerClose by

1
Your references
ISO 27001, GDPR, NIS2 or your own requirements.
2
Current state
What is in place today for each requirement.
3
Prioritised actions
Gap, priority, recommended action and owner.

What you provide

Deliverable — Its title, its author and its structure are yours: they steer what is written.
What is assessed — The requirements to compare your company with, and why.
Current state — What you already know. Anything left unstated is reported as not assessed, never as met.
Owners and context — Who owns the actions, and anything else to take into account.