CORAA
CORAA University / Free planning tool

Internal audit resource capacity planner

Test whether the annual internal audit plan is executable. Compare planned reviews against available team hours, quarter loading, specialist demand, buffer and co-sourcing gap.

Capacity profile
Available hours
7643
Required hours
1461
Gap / surplus
-6182
Utilization
19%
Specialist gap
-261
Team capacity
Name / roleRoleFTEWork daysLeaveTrainingAdmin %Cost/hrQ1 %Q2 %Q3 %Q4 %Alloc totalAvail hrs
100%706
100%1103
100%2585
100%2788
100%461
Annual plan demand
ReviewQuarterPriorityHoursSpecialist hrsSource / rationale
Q1
1439 free

Capacity 1957 hrs; demand 450 hrs; buffer 68 hrs.

Q2
1462 free

Capacity 1911 hrs; demand 390 hrs; buffer 59 hrs.

Q3
1635 free

Capacity 1888 hrs; demand 220 hrs; buffer 33 hrs.

Q4
1646 free

Capacity 1888 hrs; demand 210 hrs; buffer 32 hrs.

Planning conclusion

Capacity appears under-used. Recheck assumptions or add advisory, monitoring, follow-up or branch coverage where risk justifies it.

Where it fits

From plan to approved capacity

The capacity planner sits after annual planning and before fieldwork resourcing. It shows whether the plan can actually be delivered with available internal hours, specialist capability, quarter loading and co-sourcing support.

Build the plan first with the annual plan generator, then turn selected reviews into SOWs, RCMs and committee dashboards.

How internal audit resource capacity planning works

A risk-based internal audit plan is only credible if the team has enough capacity to execute it. Capacity planning converts FTE, leave, training, administration time and quarter availability into usable audit hours, then compares that supply against approved review hours.

The key point is not only the annual total. A plan may look balanced for the year while Q1 or Q2 is overloaded because statutory compliance, ITGC, P2P and inventory reviews all start together. Quarter loading makes that execution risk visible before the plan is approved.

This planner also separates specialist demand. ERP access, cybersecurity, treasury, tax and data analytics reviews often need skills that are not interchangeable with general internal audit hours. Specialist hours are treated as a subset of planned review hours and are capped accordingly. A visible specialist gap is usually a co-sourcing decision, not just a scheduling problem.

Worked example - the annual plan fits, but Q1 does not

An internal audit team has enough annual hours on paper, but the audit universe puts ITGC, tax compliance and P2P into Q1 because of an ERP rollout and prior findings.

Inputs
Available hours5,400 annual hours
Required hours5,100 hours including buffer
Q1 positionOverloaded because high-risk reviews are clustered
Output
Planning actionMove one review to Q2 or co-source specialist testing
Committee messagePlan is approved with a stated Q1 capacity dependency
Annual utilization alone would miss the problem. Quarter loading shows whether fieldwork, review, management meetings and reporting can realistically happen when the risk calendar requires it.

Common mistakes

Counting 100% of payroll time as audit time
Internal audit leaders spend time on risk assessment, committee meetings, management follow-up, advisory requests, team review and administration. Remove that time before comparing capacity with plan demand.
Treating specialist work as general audit capacity
ITGC, cybersecurity, treasury and tax analytics often need specialist review. General team surplus does not solve a specialist-hour gap unless the skill exists internally.
Ignoring buffer for investigations and management requests
A plan with no buffer will break when fraud alerts, regulator queries, process changes or management special reviews appear during the year.
Approving overloaded quarters
Quarter-level overload leads to rushed fieldwork, weak review notes and delayed reports. Move reviews, add support or reduce low-priority scope before approval.

Frequently asked questions

What is internal audit resource planning?+
It is the process of comparing the approved internal audit plan with available team capacity, quarter availability, review hours, specialist requirements, buffer and co-sourcing assumptions.
How many hours should an internal audit plan include?+
There is no universal statutory number. Hours should follow the audit universe, risk ranking, scope depth, number of entities, systems, locations, data availability and required reporting cadence.
Should internal audit include a planning buffer?+
Yes. Many teams reserve 10-20% for investigations, management requests, follow-up, rework, committee preparation and emerging risks. The exact buffer is a governance judgment.
Can this be used for Section 138 internal audit planning?+
Yes, as a planning aid. Rule 13(2) requires scope, functioning, periodicity and methodology to be formulated with the Audit Committee or Board and the internal auditor. Capacity planning supports that discussion but does not replace approval.

Authoritative sources

MCA
Companies (Accounts) Rules, 2014 - Rule 13Rule 13(2) links internal audit scope, functioning, periodicity and methodology to Audit Committee or Board consultation.
ICAI
ICAI IASB - Standards on Internal AuditICAI publishes Standards on Internal Audit covering planning, risk management, documentation, reporting and follow-up.
Always confirm against the latest version of the source. Regulations evolve and amendments are common.
Related calculators
Internal audit annual plan generatorInternal audit risk scorerCycle-wise internal audit programmesInternal Audit moduleEnterprise internal audit solution
Share this tool
Last reviewed: 2026-08-30 · For informational purposes only — not professional advice.