Skip to main content
The IR Plan Gap Analysis module automatically compares your tabletop exercises against your documented Incident Response (IR) plan to identify areas where your actual response differs from your documented procedures.

Enabling IR Plan Gap Analysis

Upload an IR Plan document to the Knowledge Base. Once uploaded, the IR Plan Gap Analysis module becomes active. The system will automatically analyze new tabletop exercises against your IR plan.
IR Plan Gap Analysis only applies to exercises processed after the IR Plan document is uploaded. Previously processed exercises will not be retroactively analyzed.

Viewing IR Plan Gaps in Reports

IR Plan gaps appear as a dedicated section in your tabletop reports when:
  • An IR Plan document has been uploaded
  • The module is active
  • Gaps were identified during the exercise
Gaps are organized by:
  • Category – Roles, Escalation, Communications, Training, or Playbooks
  • Inject – Which inject(s) the gap relates to
  • Summary – Each category includes a summary of gaps found
Each gap includes a title and detailed description of what was identified.

Exporting Gap Data

IR Plan gaps are included in PDF exports when the “Knowledge Base Modules” option is enabled in export preferences and the report contains gap data.