CompTIA Security+ SY0-701 Practice Question

The organization should conduct a gap analysis. Gap analysis involves comparing the current state of security controls and processes with the desired future state to identify areas that need improvement. By understanding these gaps, the organization can develop a plan to address deficiencies and enhance security measures. Other options like risk assessment, vulnerability scanning, and penetration testing are important but serve different purposes: risk assessment identifies potential risks, vulnerability scanning detects known vulnerabilities, and penetration testing simulates attacks to find exploitable weaknesses.