006_Gap Analysis1.2

Front

What is the primary purpose of a gap analysis in IT security?

Back

To compare the current state to the desired future state

Front

What should be assessed when evaluating people in IT security?

Back

Their formal experience in IT security

Front

Which of the following is NOT a part of the baseline establishment? NIST SP 800-171 Rev. 2, ISO/IEC 27001, Custom baselines, Employee training programs

Back

Employee training programs

Front

What is a key component of evaluating processes in IT security?

Back

Alignment with security policies

Front

What is a subtask mentioned under access control?

Back

User registration/deregistration

Front

What is the purpose of documenting findings?

Back

To compile data on all processes, devices, and locations

Front

What is the goal of planning for the future?

Back

To develop a path from the current state to the desired state

Front

What is the purpose of a final gap analysis report?

Back

To summarize findings and recommendations

Front

What is a key component of the final gap analysis report?

Back

Detailed findings of the current state

Front

What is the purpose of evaluating processes?

Back

To mitigate weaknesses