Assessment comparing current state against requirements to identify what needs to change.
Gap analysis compares an organisation's current state against desired requirements—whether a compliance framework, security standard, or target maturity level. It identifies gaps between where you are and where you need to be, providing a roadmap for remediation. Gap analysis is typically the first step in compliance projects, certification preparation, or security improvement initiatives. Results prioritise efforts and inform resource planning.
Why It Matters
The DSC Perspective:
Gap analysis tells you what work lies ahead before committing to certification or compliance programmes. It enables realistic planning and budgeting. Conduct gap analysis early to avoid surprises.