Study. uk . com
  1. Home
  2. All questions
  3. Question 90

CompTIA Security+ study material · question 90 of 611

An organisation adopts a security framework and needs to know what work to budget for. Which activity produces that list?

  1. A business impact analysis
  2. A supplier questionnaire
  3. Gap analysis against the chosen standard
  4. A penetration test
Show the answer

Answer: C. Gap analysis against the chosen standard

Gap analysis compares current state to the standard and produces the work list, which is the step between adoption and budget.

Source: NIST CSWP 29 (NIST) — NIST CSF 2.0 § 3 Profiles and Tiers

Challenge yourself on this topic → Study as cards