When clicking on this bar, you will be able to see the gaps within the category.

This gap occurs if no evaluation of the sufficiency of the implemented security measures have been conducted. The gap is removed by conducting the necessary evaluation (1).