Skip to content
atlas

Don't confuse these

Audit vs Gap analysis

Why they differ

A gap analysis finds what is missing before you start; an audit checks whether what you claim to do is really done.

Audit

Compliance & regulation

An independent check of whether an organisation actually follows its own policies and the requirements it has signed up to.

Formal

A planned, documented and impartial examination that gathers evidence - samples, records, interviews - to judge whether practice matches set criteria such as policies, contracts, laws or a standard, and reports each deviation as a finding.

In plain English

Like the regular car inspection - the owner may say the brakes are fine, but the inspector puts the car on the test bench and checks for real.

In practice

An internal auditor at a Danish region picks twenty staff who left last year and finds that four still have active accounts in the patient system; the report lists it as a finding with a deadline.

Why it matters

Written rules slowly drift away from what people actually do; without a regular, independent check, nobody notices until an incident or a customer exposes the gap.

Gap analysis

Compliance & regulation

A comparison of what an organisation does today with the requirements it wants to meet.

Formal

A structured review that holds current practice against each requirement of a chosen law, standard or framework, records each requirement as met, partly met or missing, and ranks the gaps by risk and effort into an action plan.

In plain English

Holding your half-packed suitcase against the packing list to see what you still need to buy before the trip.

In practice

A consultant sits down with the operations manager of a Danish water utility, goes through the NIS2 minimum requirements one by one and finds that no logs are kept and suppliers face no security terms; the result becomes a 12-month plan for the board.

Why it matters

Without it, time and money go to whatever feels urgent rather than the biggest holes, and there is no baseline to show progress to management or an authority later.

Shared connections

Atlas is in beta.