IS THIS FOR YOU?
A clear starting point
You need a baseline before deciding what to improve.
- Working arrangement
- Defined project scope; follow-up support agreed separately.
- What you bring
- Target requirements and current records.
Choosing between services?
Choose effectiveness assessment to test whether selected controls operate as intended. Control Effectiveness Assessment →
01 / THE BUSINESS CASE
Why this service matters
It is difficult to prioritize improvement without understanding the current state. A structured gap assessment makes the difference between current practices and agreed requirements visible.
02 / THE SERVICE
What is Gap Assessments & Remediation?
Gap assessment compares your current state with selected criteria. Findings are translated into actions that consider risk, dependencies, and available resources.
WORKING TOGETHER
Our Approach
F&C leads the activities below with your process and system owners. Your team provides the agreed information, approves decisions, and owns ongoing operation unless separately scoped. Activities and outputs are confirmed in the proposal.
- 01
Select requirements.
Your team helps confirm the boundaries, priorities, and available information.
- 02
Compare documents and practices.
We work with the relevant owners to review requirements and agree practical decisions.
- 03
Prioritize gaps.
Your team provides the agreed access, approvals, or operating evidence needed for delivery.
- 04
Present an owner-based action plan and optional implementation scope.
We review the findings or agreed outputs together and clarify action ownership and follow-up.
What you will receive
The agreed outputs below give your team a record of the work and a basis for decisions and follow-up.
See scope and deliverables ↓DELIVERY AT A GLANCE
- 01
Select requirements.
- 02
Compare documents and practices.
- 03
Prioritize gaps.
- 04
Present an owner-based action plan and optional implementation scope.
YOUR SERVICE, IN FOCUS
Gap Assessments & Remediation
Agree criteria and evidence needs
Assess documentation and actual practices
Explain missing or incomplete requirements
03 / PRACTICAL SUPPORT
Key capabilities
- Agree criteria and evidence needs
- Assess documentation and actual practices
- Explain missing or incomplete requirements
- Define remediation priorities and ownership
04 / YOUR DELIVERY PARTNER
Why F&C?
We connect assessment findings with accountable improvement. You work with a team that understands the relationship between cybersecurity, business priorities, and sustainable implementation.
Business-led priorities
Your objectives, existing practices, and available capacity shape the scope.
Clear ownership
We agree responsibilities and evidence expectations with your team.
Premium expertise. Competitive pricing.
Our Philippines-based delivery model offers high-quality support with transparent, proportionate engagement scopes.
05 / WHAT YOU CAN EXPECT
Service scope & deliverables
We agree the boundaries, activities, and outputs before delivery. Depending on the engagement, the scope may include:
- Current-state assessment summary
- Requirement-to-evidence gap matrix
- Remediation plan
- Management findings presentation
Systems, locations, participants, tools, timelines, and any ongoing support are confirmed in the proposal. External certification, licensing, and third-party costs are included only when explicitly agreed.
07 / YOUR QUESTIONS
FAQs
Yes. It can establish readiness and priorities before broader implementation or audit preparation.
The assessment produces an action plan. Implementation support is defined separately in the agreed scope.
The number of systems, locations, participants or suppliers, the quality of existing records, integrations, and any ongoing coverage shape the effort. We review these with you before proposing a timeline and price. You receive an agreed scope before work begins.