From the course: CRISC Cert Prep: 2 IT Risk Assessment

Unlock the full course today

Join today to access over 24,900 courses taught by industry experts.

Perform a gap analysis

Perform a gap analysis

- [Instructor] The current state of your controls may not reflect your leadership team's desired state. In order to get from where you are to where you want to be. You'll find that performing a Gap analysis can be extremely helpful. One of my favorite quotes from Stephen Covey, the author of "Seven Habits for Highly Effective People" is seek first to understand and then be understood. But there's another quote from that same book. That's spot on here. "Begin with the end in mind." A Gap analysis is essentially a comparison between the current state of your IT risk and your desired state. The Gap is the effort it will take you to achieve that desired state. Closing that gap may require people changes like employee training. It may require new or updated processes, or it may require changes in your technology stack. The purpose of a Gap analysis is to capture all of this information so you can make an informed decision…

Contents