During a review of an organization's IT capacity management process, an IS auditor should be MOST concerned if capacity planning:

The correct answer is A. omitted changes to key business systems. Capacity planning that omits changes to key business systems is most concerning because it can result in insufficient resources to support critical business operations, leading to performance degradation or service outages that directly impact business objectives.

Submitted by tarun92· Apr 18, 2026Information Systems Operations and Business Resilience

Question

During a review of an organization’s IT capacity management process, an IS auditor should be MOST concerned if capacity planning:

Options

Aomitted changes to key business systems
Blacked input from system administrators.
Cwas based on input from IT service management only.
Dwas reviewed once during the previous six months.

How the community answered

(48 responses)

A
83% (40)
B
4% (2)
C
2% (1)
D
10% (5)

Explanation

Capacity planning that omits changes to key business systems is most concerning because it can result in insufficient resources to support critical business operations, leading to performance degradation or service outages that directly impact business objectives.

Topics

#Capacity management#Capacity planning#Business alignment#IT operations audit

Community Discussion

No community discussion yet for this question.

Full CISA Practice