What is a gap analysis in relationship to HIPAA?

A.
In terms of HIPAA, a gap analysis cannot be defined.

B.
In terms of HIPAA, a gap analysis defines what an organization currently is doing in a specific area
of their organization and compares current operations to other requirements mandated by ethical
standards.

C.
In terms of HIPAA, a gap analysis defines what an organization currently is doing in a specific area
of their organization and compares current operations to other requirements mandated by state or
federal law

D.
In terms of HIPAA, a gap analysis defines what an organization proposes to be doing in a specific
area of their organization and compares proposed operations to other requirements mandated by
state or federal law.