Which process involves comparing the current security posture to the desired state to identify gaps?

Which process involves comparing the current security posture to the desired state to identify gaps?

• A. Gap Analysis
• B. Due Diligence
• C. Data Sovereignty
• D. Export Control Regulations

Answer: (A)

Identifying gaps between the current security posture and the desired state is gap analysis. This involves first defining the target security baseline or policy you want to achieve, then evaluating existing controls, configurations, processes, and risk levels to see where they fall short. By comparing what you have today with what you intend to have, you reveal gaps that require remediation, allowing you to prioritize actions and create a plan to reach the desired level of security. This approach is distinct from due diligence, which is about assessing risks during business deals; data sovereignty, which concerns where data is stored and under which jurisdiction it falls; and export control regulations, which govern legal restrictions on exporting certain technologies or data. Gap analysis zeroes in on the discrepancy itself and how to close it.