AI-Assisted Cybersecurity Policy Assessment: Evidence Grounding, Coverage Gaps, and Implications for Security Management

Cybersecurity policy assessment requires reviewers to determine whether organizational policies adequately address established security controls and to identify areas where further policy development is needed. This process is challenging because relevant evidence may be distributed across multiple