Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.
Training Camp • Cybersecurity Glossary
A process to identify security control deficiencies by comparing current and desired states.
Gap Analysis Definition: A process to identify security control deficiencies by comparing current and desired states.
Gap Analysis in cybersecurity refers to the structured process of comparing an organizations existing security posture with industry standards, regulatory requirements, or internal objectives. This analysis identifies 'gaps'areas where current controls are insufficient, missing, or noncompliant. It helps stakeholders prioritize remediation efforts by revealing vulnerabilities or deficiencies in policies, technical controls, risk management practices, and compliance protocols. Organizations often use gap analysis as a first step in compliance initiatives such as ISO/IEC 27001, NIST CSF, or HIPAA.
Turn knowledge into credentials. Browse our instructor-led cybersecurity courses.
View All Courses →