What is the PRIMARY purpose of conducting a gap analysis between Current and Target Profiles?

• A.To rank third-party vendors by their published security maturity scores, producing a leaderboard and a shortlist for the next annual procurement renewal cycle
• B.To certify the organization against an external standard, issuing an attestation letter and a public badge after the assessor signs off on the remaining open gaps
• C.To assign control owners a performance rating, tying pay and promotion decisions to closure of the open gaps
• D.To identify differences between current and desired cybersecurity outcomes, enabling the creation of a prioritized action plan to address the gaps