---
title: Perform gap analysis
description: Perform a Gap analysis of cybersecurity activities.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/governance-risk-compliance/grc-common-functions/perform-gap-analysis.html
release: australia
product: GRC Common Functions
classification: grc-common-functions
topic_type: task
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Align and prioritize cybersecurity activities, Process overview, NIST CSF Use Case Accelerator, GRC use case accelerators, Common GRC features, Governance, Risk, and Compliance]
---

# Perform gap analysis

Perform a Gap analysis of cybersecurity activities.

## Before you begin

Policy and Compliance Management Role required: admin

NIST CSF sn\_irm\_nist\_csf.risk\_executive or sn\_irm\_nist\_csf.security\_officer

## About this task

**Note:** The Gap analysis process should not take more than a minute. A weekly job that runs the gap analysis for users so the metrics are up-to-date.

## Procedure

1.  Navigate to **All** > **NIST CSF** > **Framework Profiling** > **Gap Analysis**.

2.  Search for the target using the **Name** or **Profile** fields.

3.  Open the target record.

4.  Click the **Activities** related list and select the activity.

5.  Review the activity and click **Gap Analysis** to initiate the Gap analysis.

6.  To view control objectives for the cybersecurity policy that do not have any controls in-place for the target's profile, click the **Gaps** related list.

7.  To view issues with cybersecurity controls that are non-compliant because of implementation issues, click the **Non-compliant controls** related list.

8.  To view Failed indicators of controls and risks for the target's profile, click the **Failed Indicators** related list.

9.  To view risks associated with controls for the target's profile, click the **Risks** related list.

10. To view issues related to the controls and risks for the target's profile, click the **Issues** related list.

11. To view action plans for the target's profile, click the **Action Plans** related list.

12. Click **Save**.


**Parent Topic:**[Align and prioritize cybersecurity activities](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/governance-risk-compliance/grc-common-functions/align-prioritize-activities.md)