Which of the following analysis provides a foundation for measuring investment of time, money and
human resources required to achieve a particular outcome?

A.
Vulnerability analysis

B.
Cost-benefit analysis

C.
Gap analysis

D.
Requirement analysis

Explanation:
Gap analysis is a tool that helps a company to compare its actual performance with its potential
performance. It is a formal study of what a business is doing currently and where it wants to go in
the future. Gap analysis provides a foundation for measuring investment of time, money and human
resources required to achieve a particular outcome.
The goal of gap analysis is to identify the gap between the optimized allocation and integration of
the inputs, and the current level of allocation. This helps provide the company with insight into
areas, which could be improved. The gap analysis process involves determining, documenting and
approving the variance between business requirements and current capabilities.
Answer option A is incorrect. Vulnerability analysis is also known as vulnerability assessment. It is a
process that defines systematic examination of a critical infrastructure, identifies and classifies the
security vulnerabilities in a computer, network, or communications infrastructure. In addition,
vulnerability analysis forecasts the effectiveness of proposed countermeasures, identifies the
security deficiencies, evaluates the security alternatives, and verifies the adequacy of such measures
after implementation.
Answer option B is incorrect. A cost benefit analysis is a technique related to the cost effectiveness
of different alternatives in order to see whether the benefits outweigh the costs. Its aim is to gauge
the efficiency of the intervention relative to the status quo.