CISM: Certified Information Security Manager

A gap analysis compares the organization’s existing security program and controls with the new regulatory requirements, identifies compliance deficiencies, and establishes the remediation work needed before the regulation becomes effective.