Gap analysis
Assessment of the current position, applicable requirements and action plan.

Support for ICT risk management and operational resilience.
The engagement scope is determined by the organisation’s activity, jurisdiction, contractual obligations and applicable requirements.
Assessment of the current position, applicable requirements and action plan.
Registers of ICT assets, processes, risks and critical dependencies.
Review of suppliers, contractual obligations and third-party risk.
Procedures, responsibilities, escalation and recovery scenarios.
Assessment programmes, technical testing and human-factor testing.
Policies, procedures and management reporting on action status.
Business activity, information systems and assessment scope.