Cybersecurity · Advanced level

Advanced level · Module 1: Security Governance and Risk Management · Lesson 2 of 4

Current and Target Profiles

Describe where the organisation is and where it needs to be.

In this lesson you will

  • Build a current profile
  • Set a target profile and gap analysis

Key concepts

current profiletarget profilegap analysispriorities

The lesson

A current profile records which outcomes the organisation achieves now; a target profile records the outcomes it needs, given its mission, risks and resources.

The gap between them becomes the improvement plan. Not every outcome needs the same level: a small NGO prioritises account security, backups and incident response before advanced monitoring.

Profiles should be reviewed yearly and after major changes.

Step by step

  1. Rate current outcomes for the case NGO.
  2. Set target levels with reasons.
  3. List the gaps.
  4. Prioritise them.

Practice activity

Create current and target profiles for the case NGO.

Expected result: Profiles with a prioritised gap list.

Check your understanding

  1. What is a target profile?

    Show answer

    The cybersecurity outcomes the organisation needs to achieve.

  2. Where does the improvement plan come from?

    Show answer

    The gaps between the current and target profiles.

Taught live by an instructor — online or in person. Free course lessons are for self-study and do not lead to a certificate — see registration options.