What are the practical steps to conducting an ISO 27701 gap analysis?