Find Resources & Connect with members on topics that interest you.

AI - Acquire and Implement

PO - Plan and Organize

DS - Deliver and Support

Please sign in to see your topics.

You must be logged in to join this group.

DS3.1 - Performance and Capacity Planning

This topic is intended to enable collaboration and sharing of information to facilitate a better understanding and approach to implementing this COBIT control objective based on the risk, value and guidance provided by its corresponding control practices.

COBIT Control Objective DS3.1 - Performance and Capacity Planning is contained within Process Popup Manage Performance and Capacity.

Learn more about COBIT and related publications.

Click “Join This Community” to be able to actively participate in discussions and contribute content. You must be an ISACA member to join this topic. Join ISACA now.

This Topic Has:
37 Members
0 Online
4536 Visits

Community Leader

Knowledge Center Manager

Knowledge Center Manager

Title: Become a Topic Leader!

Badge: Energizer

Performance and Capacity Planning

Establish a planning process for the review of performance and capacity of IT resources to ensure that cost-justifiable capacity and performance are available to process the agreed-upon workloads as determined by the SLAs. Capacity and performance plans should leverage appropriate modelling techniques to produce a model of the current and forecasted performance, capacity and throughput of the IT resources.

View value and Risk Drivers  help

Hide value and Risk Drivers help

Value Drivers

  • Efficient resource management by avoiding overhead costs
  • Optimised system performance achieved through internal benchmarking
  • Prediction of future performance and capacity requirements
  • Ability to benchmark capacity amongst areas of the organisation and externally to identify improvements
  Risk Drivers
  • Unexpected incidents due to lack of capacity
  • System availability faults due to a missing proactive resource capacity and performance planning
  • Failure to meet business requirements due to outdated performance and capacity plans

View Control Practices  help

Hide Control Practices  help

  1. Define a process and framework for developing, reviewing and adjusting the performance and capacity plan.
  2. Consider the following (current and forecasted) in the development of the performance and capacity plan:
    • Customer requirements
    • Business priorities
    • Business objectives
    • Budget impact
    • Resource utilisation
    • IT capabilities and industry trends, including:
        – Application performance
        – Technology, availability and reliability
        – Performance, capacity and support to users
        – Continuity and contingency planning
        – Data privacy and security considerations
  3. Develop and maintain the performance and capacity plan in a timely manner, and ensure that it is documented and agreed to by the stakeholders, aligned to SLAs, and properly recorded.

Discussions: 1 total

Must be a Topic member to contribute
Good day, colleagues. Within current IT-Capacity audit I faced with question of IT-guys: -OK, we will do capacity reports, but what you want to see there and in what form? so, could somebody share with me examples of regular (weekly, monthly) capacity...
Maksym Pomerko | 6/11/2013 2:25:22 AM | COMMENTS(0)

Documents & Publications: 36 total

Must be a Topic member to contribute
View All »
Posted by ISACA 501 days ago
Posted by ISACA 830 days ago
ICQs and Audit Programs
Posted by ISACA 1280 days ago
Posted by ISACA 1373 days ago

Events & Online Learning: 3 total

16 Mar 2015
ISACA International Event
Orlando, FL, USA
1 Aug 2016
ISACA International Event
Chicago, IL, USA
4 Jun 2018
ISACA International Event
Philadelphia, PA, USA

Journal Articles: 69 total

Volume 3, 2107
by Jayakumar Sundaram, CISA, ISO 27001 LA
The SoA is a continuously updated and controlled document that provides an overview of information security implementation.
Volume 1, 2018
by Steven J. Ross, CISA, CISSP, MBCP
Managing availability in a multi-modal environment requires a great deal of attention to details, which are being defined by the multi-modal pioneers of our day.
Volume 1, 2018
by Adeniyi Akanni, Ph. D., CISA, CRISC, ITIL
This article describes a six-stage cycle of implementing big data in commercial banks, points out the major challenges in implementation and provides a suggested solution.
Volume 5, 2017
by Filip Caron, Ph.D.
Blockchain technology, commonly expected to drive the next wave of digital infrastructure and process innovation, is rapidly developing into maturity.
Volume 4, 2017
by Rassoul Ghaznavi-Zadeh, CISM, COBIT Foundation, SABSA, TOGAF
Traditionally, security architecture consists of some preventive, detective and corrective controls that are implemented to protect the enterprise infrastructure and applications.
Volume 4, 2017
by Mathew Nicho, Ph.D., CEH, CIS, ITIL Foundation, RWSP, SAP, Shafaq Khan, Ph.D., CIS, PMBOK, PMP, SAP, and Ram Mohan, CRISC, CISM, CGEIT, ISO 27001, ITIL Foundation
A key issue often cited by information systems (IS) executives in the last three decades is aligning IT with business, which assists in realizing value from IT investments.

Wikis: 2 total

Blog Posts: 18 total

Information Security and Privacy is hot issue at present time. Number of security breaches is rapidly increasing.  In case of late detection, costs of breaches are skyrocketing. In the same time Artificial Intelligence (AI), Machine Learning (ML) are fast...
Posted By : Dragan Pleskonjic | 0 comments
My previous blog under name "Dragan on Security" was at location: It was active from August 28, 2005 to October 3, 2012. By beginning of 2017 it is moved to new location With possibility to...
Posted By : Dragan Pleskonjic | 0 comments
28 Sep 2017
Recently, I witnessed an interesting webcast by Scopism, an UK-based consulting and training company. They announced the publication of the SIAM(c) Foundation Body of Knowledge, available for free through their website Service Integration...
Posted By : Peter873 | 0 comments
The real success story is adoption of technology, and adoption is possible if the team which is implementing the Tech solution have vision and purpose of that solution to be adoptable by larger users / stake holders. We always do not get green field proje...
Posted By : Gopal207 | 0 comments
Few days ago the person behind the Hacking Team hack revealed how he did it in pastebin - (the original in Spanish) I was very keen to understand how good you need to be to hack back one of the most (in)famous hacki...
Posted By : TiagoRosado | 0 comments
“Enterprise architecture is now a strategic componentof every forward-thinking organization around the world.”Source: Related Article: Common Perspective on Enterprise Architecture: http://feapo....
Posted By : SA | 1 comments