Exam CBAP topic 1 question 285 discussion

Gap Analysis- Less the gap , more is the maturity

GAP analysis measures the maturity level of a security program by comparing its current state to a desired future state or established standards. It identifies “gaps” between where the program is and where it needs to be, helping organizations prioritize improvements and align with best practices or compliance requirements.

Gap Analysis is correct : - https://www.csoonline.com/article/566123/do-you-know-your-gap.html

C. Risk assessment C. Risk assessment The process that measures the maturity level of the security program is typically associated with risk assessment. Risk assessment involves identifying, analyzing, and evaluating risks to an organization's information and assets. As part of the risk assessment process, organizations often evaluate the maturity of their security program by assessing how well it addresses potential risks and vulnerabilities.

Risk analysis