NIC GAP-analys

NIC GAP-analys is a gap analysis tool designed to help organizations assess their compliance with various cybersecurity frameworks including ISO 27001 for NIS2, CIS Controls, and Microsoft Zero Trust. The tool enables organizations to identify gaps between their current cybersecurity measures and regulatory requirements. The platform presents predefined questions and requirement points under each security category from the selected framework. Users can indicate whether each requirement is applicable and estimate their current compliance level across four stages: Not Started, Started, Nearly Complete, and Complete. This provides a detailed view of how well the organization meets individual framework requirements. The tool supports collaborative assessment processes through two-factor authentication, allowing users to securely delegate questions to authorized colleagues or subcontractors when uncertainty arises. When insufficient scores are identified during the gap analysis, the system provides direct recommendations and action proposals generated by an artificial intelligence system. The tool is specifically designed to support organizations in preparing for NIS2 directive compliance by identifying deficiencies, improving regulatory compliance, managing risks, and creating actionable plans with concrete measures to address identified gaps.