Glossary · G
Gap assessment
A gap assessment is a structured comparison of an organization’s current controls and evidence against the requirements of a framework, standard or contract, producing a list of what is missing or deficient.
Extended definition
In more detail.
Each requirement is examined for whether a control exists, whether it operates and whether evidence shows it. Gaps are rated by consequence and feasibility and become a remediation plan with owners and dates. A gap assessment performed to the examiner’s standard, rather than as a self-assessment, is the difference between an audit that confirms and one that discovers.
In our work
Where it appears.
Gap assessments open most readiness engagements: NIST SP 800-171, ISO/IEC 27001 and ISO/IEC 42001.
By David Selakovic · Published 2026-10-16 · Revised 2026-10-16 · Reviewed every 180 days