Glossary: Compliance, Privacy and Penetration Testing

Current profile and target profile

Also written: current profile, target profile

In NIST Cybersecurity Framework 2.0, the current profile describes where a company is now and the target profile describes where it wants to be. The difference between them becomes the gap analysis plan.