Resource Capacity Planning (CGEIT - IT Resources): Complete Guide and Exam Tips
Introduction
Resource Capacity Planning is a core topic in the IT Resources domain of the ISACA Certified in the Governance of Enterprise IT (CGEIT) exam. It covers how an enterprise makes sure it has the right IT resources, in the right amount, at the right time, and at the right cost. Those resources include people, infrastructure, applications, information and funding. The aim is to meet current and future business needs. CGEIT looks at the topic from a governance view, so the focus is on direction, oversight, alignment and value, not on technical tuning.
Why Resource Capacity Planning Is Important
Capacity planning connects business strategy to IT delivery. Without it, the enterprise faces two opposite risks:
- Under-capacity leads to service outages, poor performance, missed SLAs, delayed projects, staff burnout and lost revenue opportunities.
- Over-capacity leads to idle assets, wasted capital, higher operating costs and lower return on IT investment.
From a governance perspective, capacity planning supports several outcomes:
- Strategic alignment: IT resources follow the business strategy and growth plans.
- Value delivery: investments are sized to deliver the expected benefits.
- Risk optimization: the risk of service disruption and of failing to meet demand is reduced.
- Resource optimization: resources are used efficiently and effectively. This is one of the governance objectives in COBIT (EDM04 Ensured Resource Optimization).
- Performance measurement: utilization and capacity data feed governance dashboards.
What Resource Capacity Planning Is
Resource capacity planning is the ongoing process of understanding current resource capacity, forecasting future demand, and closing the gap in a cost-effective way. In CGEIT the concept applies to all enterprise IT resources:
- Human resources: skills, competencies, headcount, contractors and succession planning.
- Infrastructure: compute, storage, network, data centers and cloud services.
- Applications and services: licensing, scalability and service capacity.
- Information: data volume growth and retention needs.
- Financial resources: budgets and funding capacity for the portfolio.
In COBIT 2019, the relevant objectives are:
- EDM04 Ensured Resource Optimization: the governance objective. The board and executives set direction and principles for resource management and monitor the results.
- BAI04 Managed Availability and Capacity: the management objective covering technical capacity.
- APO07 Managed Human Resources: covers people capacity and skills.
- APO05 Managed Portfolio and APO06 Managed Budget and Costs: cover the funding and investment side.
Remember the CGEIT distinction: governance evaluates, directs and monitors (EDM), while management plans, builds, runs and monitors.
How Resource Capacity Planning Works
1. Understand business strategy and demand drivers. Start with business plans, growth forecasts, new initiatives, mergers, regulatory changes and the investment portfolio. Capacity must be driven by business demand, not by IT preference.
2. Establish resource management principles (governance). The board or IT steering committee sets policies covering:
- risk appetite for capacity shortfalls
- sourcing strategy (build, buy, outsource, cloud)
- target utilization levels
- the skills strategy
- funding principles
3. Assess current capacity and utilization. Inventory resources and their usage. Examples include server utilization, storage consumption, staff allocation across projects, the skills matrix and license use. Identify bottlenecks and idle resources.
4. Forecast future requirements. Use trend analysis, modeling, scenario planning and portfolio demand. These show what will be needed over short, medium and long terms. Include project pipelines from portfolio management.
5. Perform gap analysis. Compare forecast demand to current capacity for each resource type, including skills gaps.
6. Develop options and the capacity plan. Options include:
- acquiring infrastructure
- cloud elasticity
- outsourcing or contracting
- training and reskilling
- reallocating resources
- demand management, such as prioritizing or deferring projects
Evaluate each option on cost, risk, time and alignment. The plan should be approved through governance structures.
7. Integrate with portfolio and budgeting. Capacity constraints should shape investment prioritization. A project portfolio that exceeds resource capacity is a classic governance failure.
8. Monitor, measure and adjust. Track KPIs and KGIs such as:
- utilization rates
- forecast accuracy
- SLA performance
- skills coverage
- cost per unit of capacity
- project delays caused by resource shortages
Report to governance bodies and revise the plan regularly. It is a continuous cycle.
Key Roles
- Board / Executive Committee: sets direction and resource principles and ensures resources match strategy.
- IT Steering / Strategy Committee: prioritizes demand and approves capacity investments.
- CIO: accountable for the IT resource plan.
- Business owners: provide demand forecasts and validate requirements.
- HR: partners on workforce and skills planning.
- Capacity / Service managers: carry out the technical capacity management.
Common Pitfalls
- Planning based only on technical trends, without business input.
- Ignoring human capacity and skills while focusing only on hardware.
- Approving more projects than the enterprise can resource.
- Relying on key individuals with no succession plans.
- Not reassessing capacity after major business changes or outsourcing.
- Neglecting vendor and cloud provider capacity commitments in contracts.
Exam Tips: Answering Questions on Resource Capacity Planning
1. Think governance first. The best CGEIT answer usually involves alignment with business strategy, establishing principles or frameworks, or oversight by the appropriate governance body. Answers about buying more servers or tuning systems are typically operational distractors.
2. Business needs drive capacity. If asked what should come FIRST, choose understanding business requirements or strategy. Gap analysis comes next, then solutions.
3. Look for the root cause. If projects are delayed due to resource shortages, the governance-level answer is usually poor portfolio prioritization or no integrated resource plan. Hiring more staff alone is rarely correct.
4. Remember all resource types. CGEIT treats people, skills and competencies as critical IT resources. Questions about skills gaps often point to a workforce or competency plan aligned to strategy.
5. Know which body decides. Investment prioritization under constrained capacity belongs to the IT steering committee or portfolio governance body. Setting resource principles belongs to the board or executive level.
6. Balance cost, risk and value. The correct option often optimizes resources rather than maximizing or minimizing them. Watch for the words optimize, align and balance.
7. Prefer continuous, measured approaches. Answers that include monitoring, metrics and regular review beat one-time fixes.
8. Watch the qualifiers. Note the words MOST, BEST, FIRST, PRIMARY and GREATEST concern. For example:
- GREATEST risk might be lack of alignment between the capacity plan and business strategy.
- BEST way to ensure adequate resources is usually an enterprise-wide resource plan integrated with the portfolio.
9. Sourcing decisions remain governance responsibilities. Outsourcing or cloud adoption does not transfer accountability. The enterprise must still govern vendor capacity through contracts, SLAs and monitoring.
10. Map to COBIT. Associate EDM04 with governance of resources and BAI04 with operational capacity management. If the question is board-level, choose the EDM-type activity.
Sample Question
An enterprise repeatedly experiences project delays because key IT staff are overallocated. What should the IT steering committee do FIRST?
A. Approve hiring additional contractors
B. Implement time-tracking software
C. Ensure project prioritization reflects available resource capacity and strategic value
D. Ask the CIO to extend project deadlines
Answer: C. It addresses the governance root cause: portfolio demand is not aligned with capacity and strategy. The other options are tactical.
Summary
Resource Capacity Planning ensures IT resources meet business demand efficiently and at acceptable risk. For CGEIT, focus on four things:
- business-driven planning
- governance oversight
- integration with portfolio and budget
- people as well as technology
- continuous monitoring
When in doubt, choose the answer that aligns resources with strategy and optimizes value through proper governance structures.
