CISM Certification Domain 1: Information Security Governance Video Boot Camp 2019 - Gap Analysis

The video tutorial explains gap analysis, a method to bridge the gap between the current and desired future states. It uses a lemonade stand example to illustrate identifying current processes, setting desired outcomes, and developing action plans. The tutorial also discusses applying gap analysis in various contexts, emphasizing due diligence and due care. It highlights the importance of prioritizing efforts and understanding the impact of actions in different business units.

What is the first step in conducting a gap analysis?

• Prioritizing efforts

• Identifying current processes

• Developing an action plan

• Identifying the desired outcome

In the lemonade stand example, what is the desired future sales target?

• $40 per day

• $30 per day

• $20 per day

• $10 per day

What is the purpose of developing an action plan in gap analysis?

• To evaluate the importance of different efforts

• To determine the desired outcome

• To bridge the gap between current and target states

• To identify current processes

How can efforts be prioritized in gap analysis?

• By identifying current processes

• By using a scale of high, medium, low

• By determining the desired outcome

• By developing an action plan

What is the focus of gap analysis in a business unit like security?

• Maximizing profits

• Minimizing losses

• Improving customer satisfaction

• Increasing sales