Gap analysis does not apply to

Question

Options

• ATransactions
• Bavailability
• CPrivacy
• DSecurity

• A
  21% (5)
• B
  63% (15)
• C
  8% (2)
• D
  8% (2)

Explanation

Availability (B) is correct because gap analysis is a structured comparison methodology - it measures the distance between a current state and a defined target or standard. Availability is a metric (typically expressed as uptime percentage against an SLA), not a compliance or control framework, so you measure and monitor it rather than gap-analyze it.

Why the distractors are wrong:

• A (Transactions): Transaction gap analysis is standard in auditing and accounting - it identifies discrepancies between expected and actual transaction controls or outputs.
• C (Privacy): Privacy gap analysis is widely used to assess compliance with regulations like GDPR or CCPA, comparing current practices against required standards.
• D (Security): Security gap analysis is one of the most common applications - organizations regularly compare their current security posture against frameworks like NIST or ISO 27001.

Memory tip: Think "you measure availability, you analyze gaps in compliance." If you can benchmark a practice against a regulation or control framework, gap analysis applies. Availability is governed by SLAs and uptime monitors - not gap assessments.

No community discussion yet for this question.