Control Gap
What is Control Gap?
A deficiency identified when an organisation's existing controls do not fully meet the requirements of a target compliance framework or standard. Control gaps are identified through gap analysis and addressed through remediation plans.
Frameworks that govern control gap
What the standards actually require on control gap
Requirements naming control gap across 5 standards, quoted from the control text.
The institution actively looks for control gaps that a zero-day attack could exploit.
ffiec-cybersecurity-assessment-tool-cat::D3.PC.Im.Inn.3 · D3.PC.Im.Inn.3 Infrastructure Management (Innovative 3) →Advanced control principles for vulnerability detection (required, with baseline and intermediate, of an AI whose inherent risk is high).
hkma-cyber-resilience-assessment-framework-c-raf::4.1.A · 4.1 Vulnerability detection: advanced level →The entity must fix material weaknesses in operational risk management, including gaps, weaknesses and failures in controls. Remediation needs clear accountability and assurance, has to tackle root causes promptly, and identified control gaps, weaknesses and f...
apra-cps-230-operational-risk-management::30 · Para 30 Remediate material weaknesses and keep them in the risk profile until fixed →Maintain recordkeeping + communications strategy + post-incident review + board reporting per OAIC guidance and Privacy Act section 26WL recordkeeping expectations.
AUNDB-A7 · Recordkeeping, Communications Strategy, Post-Incident Review, Board Reporting →Operate independent assurance + internal audit + external examination per OSFI B-13 Domain 6. Independent Assurance and Internal Audit must (a) maintain Internal Audit function independence per B-13 + OSFI Corporate Governance Guideline + (b) provide assurance...
OSFIB13-6 · Independent Assurance, Internal Audit, External Examination →Questions people ask about control gap
What is Control Gap?
Why is Control Gap important for compliance?
Which compliance frameworks address Control Gap?
Where can I learn more about Control Gap?
See how Control Gap applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.