CISM: Certified Information Security Manager

A gap assessment maps the existing information security program against an applicable control framework or defined requirements, exposing missing, incomplete, or unaddressed areas. This directly demonstrates whether the program’s coverage is appropriate.