“Which capabilities is no one addressing?”
Overlap is loud — several systems, several invoices. A gap is silent: a capability the institution needs but no system delivers and no one owns. The coverage heat map makes the silence visible by laying every HERM capability out at once and shading each by how many systems cover it.
Red, zero-coverage cells against the full HERM capability set — especially in areas the institution treats as core.
A shortlist of gaps to staff, buy, or consciously accept — decided on purpose rather than discovered by accident.
The coverage map shows a capability with no system at all. Sometimes that is honest — the institution genuinely doesn't do it. Sometimes it is a blind spot: the work happens in spreadsheets and email, unowned and unsupported. Either way, the red cell forces the conversation before an incident does.