Library Home: Cyber Security: Gap Analysis

Gap Analysis in Cybersecurity .com (Commercial Websites)

There are a lot of Gap Analysis sites that give you the basics and offer (for fee of course) to do it for you. Here are a couple of examples:

A Security Review in the UAVNet Era: Threats, Countermeasures, and Gap Analysis.
Unmanned Aerial Vehicles (UAVs)
Potential attack vectors include:
• physical: threats related to the physical interaction with the UAV;
• communication: threats related to UAV-UAV or UAV-GCS communication links;
• malware: threats that primarily require the interaction with malwares;
• sensor: threats related to the different sensors used in UAV;
• UAV network: threats related to the UAV network configurations/applications;
• supply chain: threats involving the special requirements on UAS for production, firmware
update, maintenance, or UAV battery charging;
• hardening defects: threats related to software flaws, lack of system hardening, or vulnerability
assessment procedures;
• miscellanea: threats not directly categorized in the previous groups.

Assessing Law Enforcement’s Cybercrime Capacity and Capability (leb.fbi.gov) "Local law enforcement agencies occupy the front lines of most criminal and social problems; strengthening their capacity and capability of dealing with emergent and significantly harmful problems like cybercrime should be a high priority."
Cybersecurity Awareness Federal Financial Institutions Examination Council (FFIEC) Cybersecurity Assessment Tool (PDF) (Update May 2017) with rubrics.
Review the FFIEC Cybersecurity Assessment Tool (CAT) (mass.gov) Links to: Full Cybersecurity Assessment Tool Mapping Baseline Statements to FFIEC Handbook Mapping to NIST Cybersecurity Framework FFIEC IT Examination Handbooks

Ransomware Self-Assessment Tool (R-SAT) (csbs.org/)
The Bankers Electronic Crimes Taskforce (BECTF), state bank regulators, and the United States Secret Service collaborated to develop this tool to help financial institutions periodically assess their efforts to mitigate risks associated with ransomware1 and identify gaps for increasing security.