🛡️ Free practice test question from: gap analysis (Security+)

Establishing a baseline is a crucial first step in a gap analysis because it defines the desired security standards and objectives that the organization aims to achieve. This baseline serves as a benchmark to compare the current security posture, helping to identify gaps, weaknesses, and areas that need improvement. Without a clear baseline, it would be challenging to determine what changes are necessary to enhance the organization's security.

A) To allocate the budget for upcoming security projects.
While budgeting is important, it is not the primary reason for establishing a baseline in a gap analysis.

C) To train employees on new security policies and procedures.
Training may result from identifying gaps, but it is not the primary purpose of setting a baseline.

D) To identify the most recent security technologies available in the market.
Identifying new technologies can be part of the improvement plan, but it is not the main reason for establishing a baseline.