The information is gathered by AWS and other cloud tooling and handson consultancy engagement with the customer. The gathered information is incorporated, including one recommended measure per identified security risk. The Security Gap Analysis report also includes budget estimates, implementation indications, and time estimates for the missing security components. The report provides advice for efficiently and effectively addressing groups of measures, serving as guidelines for developing a realistic security plan and allocating budget resources. Anti-ransomware analysis Part of the Security Gap Analysis is the qualification of the organization concerning Zero Risk anti-ransomware measures. This assesses the organization's resilience against ransomware threats.

The Security Gap Analysis is concluded with a Security Gap Analysis Report. The gathered information is incorporated, including, among other things, the explanation of identified security risks and recommended measures for each identified security risk, along with associated budgets. The Security Gap Analysis Report provides IT Managers, Security Managers, CISOs, and CIOs with guidelines for developing a realistic security plan and allocating budget resources.