GAP Analysis
Know exactly where you stand against the standard
A GAP analysis compares your current security against a standard that fits your organisation. You can see at a glance what is already in order, where the points for improvement lie, and what deserves priority, complete with a concrete plan to resolve them.
- Such as ISO 27001, NIS2 and more
- Independent perspective
- Report within two weeks
Why now
Without a baseline measurement, you are investing blindly
You can only improve in a targeted way if you know where you stand. A GAP analysis provides that insight, independently and well-founded, and translates it immediately into action.
An independent perspective
A fresh external perspective identifies the blind spots that often go unnoticed internally.
A concrete improvement plan
Not an abstract report, but prioritised points for improvement with assigned owners and a realistic schedule.
Ready for audit and NIS2
Know where you stand before a certification or audit, and demonstrate that you take your duty of care seriously.
What we assess
Your entire security, against the right standard
We assess the components that matter against a standard that suits you, such as ISO 27001, NIS2, or NEN 7510, and many more.
Policy and governance
Access security
Incident management
Supply chain
Business continuity
Technical measures
Our approach
From insight to plan in five steps
Scope
01
We determine which standards, departments, and systems are included.
Baseline measurement
02
We assess your current situation against the chosen standard.
Scoring points
03
Each improvement point is weighted by impact and urgency: high, medium, or low.
Improvement plan
04
A prioritised plan with owners and a realistic schedule.
Securing progress
05
Everything is recorded in your GRC system to ensure follow-up continues.
What you receive
A report you can act on immediately
You get a clear picture of your maturity and an improvement plan that states exactly what needs to happen, by whom, and when.
- Scorecard of your maturity per component
- All improvement points clearly organised by impact and urgency
- Prioritised improvement plan with owners and deadlines
- Advice on quick wins and larger projects
In the system
Track your improvement points in the GRC system
A GAP analysis is not a one-off report that disappears into a drawer. Your improvement points, measures, and progress are entered into the ID Control GRC Management System, with owners, status, and a PDCA cycle, so you can see your maturity grow.
Frequently asked questions
Good to know
What is the difference compared to an audit?
A GAP analysis measures where you stand now as a starting point for improvement. An audit tests later whether you actually comply.
How long does it take?
Usually, a report is delivered within two weeks of the kick-off, depending on the size of the scope.
Which standard do we use?
It can be performed against various frameworks, such as ISO 27001, NIS2, or NEN 7510, and many more. We tailor it to your sector and situation.
And afterwards?
You receive an improvement plan with priorities and owners, which you can implement yourself or together with us and secure within the system.
Curious about where your points for improvement lie?
Schedule a GAP analysis or request a custom quote. We will map out your security, show you where the improvements are needed, and provide a plan to resolve them.