Problem
• Cyber-security risk management program: Provide reasoning and basis for organization-wide compliance with cyber-security risk management strategy.
• Gap analysis: Outline the difference between the current and target profiles, and determine the actions required to bridge the gaps (any gaps and listed acceptable mitigations.)