About this interactive
Gap analysis is how security professionals translate assessment findings into an actionable remediation roadmap. This activity presents five real-world-style findings from a fictional organization and asks you to categorize each one under the correct NIST CSF function — Identify, Protect, Detect, Respond, or Recover. Getting the categorization right is the first step toward prioritizing remediation work and communicating risk to leadership.
About TechKnowSurge
TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.
Explore free tools and programs →