Article Content

Overview

The Gap Analysis feature is an AI feature powered by Claude. The feature evaluates how well existing controls address linked requirements and risks, summarizing whether the requirement or risk is fully covered, partially covered, or not covered, including a gap analysis summary and identifying gaps. The summary will also include a list of recommended actions: 

• Refined Control: The feature will suggest improvements to a control already linked to the parent object.

• Suggested Control: The feature will suggest a similar control in the library that is not yet linked (powered by the same text-embedding similarity model used by Requirement Similarity and Control Recommendation).

• Generated Control: The feature will create a brand-new AI-drafted control to fill an identified gap, with a rationale for why it is needed.

Note: This feature is intended to be a starting point for the user. Please ensure to review the AI-generated content and make edits prior to linking to a requirement or risk.

User Account Requirements

Users must have permission to view, edit, and create on the control object to view and access the Gap Analysis feature, edit a suggestion from the Gap Analysis feature, or create new controls when using the Gap Analysis feature.

Related Information/Setup

Please refer to the following articles for more information on the Gap Analysis feature:

• Enabling/Disabling Gap Analysis on an Org
• Exporting Gap Analysis

Using the Gap Analysis Feature on a Form

Note: The View Gap Analysis link appears wherever a Control relationship table is present on a Requirement or Risk form.

1. Navigate to a Requirement or Risk form with a Control relationship table.
2. From the Form, access the Control relationship table.
3. From the Control relationship table, click the View Gap Analysis link.

View Gap Analysis Link

4. The system will run the gap analysis and display the number of Recommendations it has generated.

Recommendations

5. Click the View Gap Analysis link to view the generated recommendations.

View Gap Analysis Link

6. From the AI-Gap Analysis pop-up, the Gap Analysis feature will categorize its recommendations at the top of the pop-up, indicating if the requirement or risk is Fully Covered, Partial Covered, or Not Covered.

Partial Coverage

7. Click the View Full Analysis link. 

View Full Analysis Link

8. The View Full Analysis section will expand displaying the Gap Analysis Summary and Identified Gaps.

View Full Analysis Section

9. The following Recommended Actions will be listed to help refine controls, suggest a new AI generated control, or suggest an existing control:

   • Refined Control: The feature will suggest improvements to a control already linked to the parent object. Click the Accept link to add the suggested improvements to the control.

Refined Control

• Existing Control: The feature will suggest a similar control in the library that is not yet linked (powered by the same text-embedding similarity model used by Requirement Similarity and Control Recommendation). Click the Add link to add the suggested control to the parent object.

Existing Control

• Generated Control: The feature will create a brand-new AI-drafted control to fill an identified gap, with a rationale for why it is needed. Click the Add link to create the AI-generated control, adding it to the parent object. Click the Edit button to edit the AI-generated control before assigning it to the parent object.

Generated Control

10. Once you have added controls or accept a control modification you can run the Gap Analysis again by clicking the Refresh Analysis link to for the most up-to-date results.

Refresh Analysis Link