ThalewynThalewyn
  • Inside Thalewyn
  • Services
  • Packs
  • Encyclopedia
  • FAQ
FeedbackSign inGet started
  • Inside Thalewyn
  • Services
  • Packs
  • Encyclopedia
  • FAQ
  • Share feedback
  • Sign in
Thalewyn

Governance, risk, compliance and IT operations services whose deliverables feed each other.

Product

  • Inside Thalewyn
  • Services
  • Packs
  • Encyclopedia
  • FAQ
  • About
  • Free tools

Frameworks

  • ISO/IEC 27001
  • GDPR
  • NIS2
  • DORA
  • HIPAA
  • PCI DSS

Legal

  • Terms
  • Privacy
  • Legal notice

© Thalewyn

  • Inside Thalewyn
  • Services
  • Packs
  • Encyclopedia
  • FAQ

Run Gap Assessment

No account needed. Answer the questions, pay securely, and receive your deliverable.

Name shown on the deliverable

Name shown on the deliverable

Shown on the deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Deliverable

Deliverable

You set its title, author and structure.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

As it will appear on the result.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Shown as the author of the deliverable; never filled in by the AI.

What is assessed

What is assessed

The requirements to compare yourself with, and why.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

The laws and standards to assess against. Each one selected brings its requirements.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Why the assessment is run (e.g. prepare a customer audit, check NIS2 readiness).

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Entities, sites, processes or systems assessed.

RequirementCurrent state

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Internal rules, contractual clauses or requirements of another standard, one row each, with their state if you know it.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

When the gaps must be closed: each action's date falls at least two weeks before. If left empty: 45 days for a high priority, 120 for a medium one.

Current state

Current state

What you already know. Anything left unstated is reported as not assessed, never as met.

Choose a framework above: its requirements appear here.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

A selected control assessment or compliance questionnaire is read automatically; a state chosen here takes precedence. ISO/IEC 27001: the key Annex A controls are always assessed, the others once you state them.

Owners and context

Owners and context

Who owns the actions, and anything else to take into account.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Who is responsible for which area. Owners in the result are taken from here; where no role covers an area, the owner is left for you to fill.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Anything the service should take into account.

What the AI provider receives

Your answers, to write this deliverable.

Replaced first, then put back in your deliverable: Email addresses, People's names, Company names.

€1.00

What a free account adds

  • Your details filled in for you on every form
  • Every deliverable saved and reusable as input to any service
Create a free account