Executive Guide to Information Security, The: Threats, Challenges, and Solutions

Information Security Gap Analysis Example

Component	Current Score (0–2)	Desired Future Score (0–2)	Priority (High, Medium, Low)	Desired Time Frame	Comments
People
Strategy	7	12	High	12 months	No formal strategy exists today
Components	8	10	Medium	18 months	Staff focused on day-to-day firefighting
Administration	9	10	Low	24 months	Minimal involvement of executive staff
People Summary	24	32
Process
Strategy	10	12	High	12 months	Informal policies that are not followed consistently
Components	9	12	Low	24 months	Policies are not easily accessed by employees
Administration	7	8	Low	18 months	All major security policies have been considered in program
Process Summary	26	30
Technology
Strategy	6	8	Medium	12 months	No technology architecture is in place, and changes are tactical in nature ...