The organization creates a report after performing a gap analysis that includes: The areas where the business complies with the requirements of the standard The areas where the organization does not adhere to the requirements of the standard Recommendations about what to include in the implementation plan.