• please provide references and citations for further research
• Information security audit teams assess compliance with information security requirements and identify strengths, weaknesses, opportunities, and threats (SWOT). Formal standards or frameworks such as, but not limited to, ISO27001, ISO22301, GDPR, and NIST can be used to support formal security gap analysis. select a formal standard. Construct a gap analysis matrix that captures the top 10 information security requirements. The matrix should, at a minimum, include the following:
  • Columns for the critical level of the requirement
  • Level of compliance
  • Responsible organization
  • Findings
  • Recommendations

Assume5 of the 10 requirements do not meet the compliance criteria. Hypothesizethe responsible accountable organization, findings, and recommendations for the non-compliant requirements.