Gap Assessment

4 righe · filtri server-side · click controllo → coverage/delta/evidence/task

Framework	Requirement	Control	Mapping	Status	Owner	Deadline	Evidence	Tasks	Gap	Notes
ISO/IEC 27001 `2022.1`	A.8.1 User endpoint devices	`CTRL-EPM-001` Endpoint management baseline	FULL	IN_PROGRESS	ops@alfa.example	2026-08-01	0	2		EPM covers endpoint device controls
ISO/IEC 27001 `2022.1`	A.8.15 Logging	`CTRL-LOG-001` Central logging	PARTIAL	IMPLEMENTED	sec@alfa.example	2026-09-15	2	0	ISO requires 12-month immutable retention; current retention is 90 days	Central logging covers retention partially
NIS2 `2026.1`	NIS2-LOG Logging and monitoring	`CTRL-LOG-001` Central logging	FULL	IMPLEMENTED	sec@alfa.example	2026-09-15	2	0	ISO requires 12-month immutable retention; current retention is 90 days	NIS2 logging satisfied by central logging
NIS2 `2026.1`	NIS2-SUPPLY Supply-chain security clause	—	UNMAPPED	UNMAPPED	—	—	0	0	No approved mapping to a canonical control