gap compliance analysis