---
sourceDocument: Australia Governance, Risk, and Compliance
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/governance-risk-compliance

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Governance, Risk, and Compliance

ft:clusterId :

    - grc

bundleId :

    - grc

workflow :

    - Technology


---

# Perform gap analysis

# Perform gap analysis {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Perform a Gap analysis of cybersecurity activities.

## Vorbereitungen

Policy and Compliance Management Role required: admin

NIST CSF sn_irm_nist_csf.risk_executive or sn_irm_nist_csf.security_officer

## Warum und wann dieser Vorgang ausgeführt wird

Hinweis:  
The Gap analysis process should not take more than a minute. A weekly job that runs the gap analysis for users so the metrics are up-to-date.

## Prozedur

1. Navigate to AllNIST CSFFramework ProfilingGap Analysis.
2. Search for the target using the Name or Profile fields.
3. Open the target record.
4. Click the Activities related list and select the activity.
5. Review the activity and click Gap Analysis to initiate the Gap analysis.
6. To view control objectives for the cybersecurity policy that do not have any controls in-place for the target's profile, click the Gaps related list.
7. To view issues with cybersecurity controls that are non-compliant because of implementation issues, click the Non-compliant controls related list.
8. To view Failed indicators of controls and risks for the target's profile, click the Failed Indicators related list.
9. To view risks associated with controls for the target's profile, click the Risks related list.
10. To view issues related to the controls and risks for the target's profile, click the Issues related list.
11. To view action plans for the target's profile, click the Action Plans related list.
12. Click Save.