Gap Analysis
What is Gap Analysis?
A comparison between an organisation's current state and the requirements of a target framework or standard. Identifies areas that need improvement to achieve compliance.
Terms that appear alongside gap analysis
Each of these is named in at least one of the same controls as gap analysis. The number is how many controls name both.
- compliance 7 shared controls
- audit 6 shared controls
- ciso 5 shared controls
- grc 5 shared controls
- information security 5 shared controls
- risk assessment 4 shared controls
- iso 27001 4 shared controls
- soc 2 4 shared controls
Frameworks that govern gap analysis
What the standards actually require on gap analysis
Requirements naming gap analysis across 6 standards, quoted from the control text.
The differences between the current and the target environment are found and the broad changes to the enterprise architecture are described. Every gap and every change required to reach the target is identified;
cobit-2019::APO02.04 · APO02.04 Conduct a gap analysis →Based on the legacy software's safety class, the manufacturer performs a gap analysis of the available deliverables against those clauses 5.2, 5.3, 5.7 and 7 require, assesses the continuing validity of what exists, evaluates for each gap the risk reduction fr...
iec-62304-2015-medical-device-software-lifecycle-processes::4.4.3 · 4.4.3 Gap analysis →The organization should form a planning team of the key people in A.2.2 to develop, run, maintain and improve the plan, each knowing their own and the others' roles in planning, response and recovery, and should assign the following.
ansi-asis-wvpi-aa-2020-workplace-violence-and-active-assailant::A.2.3 · A.2.3 Identify responsibilities and authorities of key personnel →TRANSITION PATH from prior QSR to QMSR: the FDA Final Rule (89 FR 7496) provides a 2-year implementation period - the QMSR applies from 2 FEBRUARY 2026 + manufacturers must fully implement the harmonised QMSR by that date.
QMSR-Transition · Transition from prior QSR + 2 February 2026 application + FDA inspection approach →HKMA TM-G-1 implementation roadmap + status. ORGANIZATIONAL ROLES at AI: (a) BOARD + RISK COMMITTEE - TM-G-1 governance oversight + Technology Risk Management Framework approval + Risk Appetite + Pillar 2;
HKMA-TMG1-Implementation-Roles-Tooling-Status · TM-G-1 Implementation Roadmap, Roles, Tooling, Status and Future →An Operations Manual contains the policies, processes and procedures ground handling personnel need and its current edition is usable at every location;
iata-operational-safety-audit-iosa-standards-manual::GRH 1.6 · GRH 1.6 Operational Manuals →Questions people ask about gap analysis
What is Gap Analysis?
Why is Gap Analysis important for compliance?
Which compliance frameworks address Gap Analysis?
Where can I learn more about Gap Analysis?
See how Gap Analysis applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.