Profile current and target state across the six functions

short · 50 min · Objective 1.11

Task

Produce a current profile and a target profile for your lab across the CSF functions, and turn the gap into a prioritised, owned programme.

Steps

  1. Create lab/csf-profile.csv with header function,category,current,target,gap,priority,owner.
  2. Cover all six functions with at least two categories each, scoring current and target on a consistent scale you define in the file's first comment line.
  3. Set the target from risk and obligation, not from ambition. At least two categories must have a target BELOW the maximum, with the reason recorded.
  4. Compute gap and sort the file by gap descending.
  5. Write lab/csf-programme.md listing the top five gaps as work items with owners and rough sequencing.

Verify

awk -F, 'NR>2 {print $1}' lab/csf-profile.csv | sort -u | wc -l
awk -F, 'NR>2 {n++} END {print n" category row(s)"}' lab/csf-profile.csv
awk -F, 'NR>2 && $4+0<5 {n++} END {print n+0" deliberately below maximum"}' lab/csf-profile.csv
grep -Ec '^[0-9-]' lab/csf-programme.md

Six functions, twelve or more categories, at least two targets deliberately below maximum, and five work items. A profile where every target is maximal is an ambition rather than a plan.

This is an independent study companion for CompTIA SecurityX CAS-005 and is not produced by or endorsed by CompTIA.