THE SMART TRICK OF GAP ANALYSIS FOR RISK MANAGEMENT THAT NOBODY IS DISCUSSING