From the course: CRISC Cert Prep: 2 IT Risk Assessment
Unlock the full course today
Join today to access over 24,900 courses taught by industry experts.
Perform a gap analysis
From the course: CRISC Cert Prep: 2 IT Risk Assessment
Perform a gap analysis
- [Instructor] The current state of your controls may not reflect your leadership team's desired state. In order to get from where you are to where you want to be. You'll find that performing a Gap analysis can be extremely helpful. One of my favorite quotes from Stephen Covey, the author of "Seven Habits for Highly Effective People" is seek first to understand and then be understood. But there's another quote from that same book. That's spot on here. "Begin with the end in mind." A Gap analysis is essentially a comparison between the current state of your IT risk and your desired state. The Gap is the effort it will take you to achieve that desired state. Closing that gap may require people changes like employee training. It may require new or updated processes, or it may require changes in your technology stack. The purpose of a Gap analysis is to capture all of this information so you can make an informed decision…