A.8.6 Audit Checklist

When to use this

Use this checklist during an internal audit of resource monitoring, trend analysis, capacity forecasting, scaling, tuning, and staffing capacity.

Related controls

• A.8.6 Capacity Management
• A.8.6 Audit Evidence Pack
• Capacity Management Plan
• Capacity Monitoring and Forecast Register
• Critical System Capacity Review Checklist

Audit checklist

• Review capacity management plan.
• Identify critical systems and capacity indicators.
• Review monitoring dashboards or reports.
• Check thresholds and alert ownership.
• Review trend and forecast records.
• Review tuning, scaling, upgrade, or demand management actions.
• Review cloud quotas/autoscaling/cost limits where relevant.
• Review staff capacity and on-call coverage for critical operations.
• Review capacity-related incidents or problems.
• Interview system or service owner.

Findings table