SOC 2
Gap Analysis
Assessment comparing current security posture against a target framework to identify control deficiencies. Gap analysis is the standard first step in compliance programs, typically completed 6-12 months before the target audit date.