CORAA University / Free planning tool

Internal audit resource capacity planner

Test whether the annual internal audit plan is executable. Compare planned reviews against available team hours, quarter loading, specialist demand, buffer and co-sourcing gap.

Open annual plan See IA module

Capacity profile

Entity

Financial year

Reporting line

Planning buffer %

Available hours

7643

Required hours

1461

Gap / surplus

-6182

Utilization

19%

Specialist gap

-261

Team capacity

Name / role	Role	FTE	Work days	Leave	Training	Admin %	Cost/hr	Q1 %	Q2 %	Q3 %	Q4 %	Alloc total	Avail hrs
												100%	706
												100%	1103
												100%	2585
												100%	2788
												100%	461

Annual plan demand

Review	Quarter	Priority	Hours	Specialist hrs	Source / rationale

Q1

1439 free

Capacity 1957 hrs; demand 450 hrs; buffer 68 hrs.

Q2

1462 free

Capacity 1911 hrs; demand 390 hrs; buffer 59 hrs.

Q3

1635 free

Capacity 1888 hrs; demand 220 hrs; buffer 33 hrs.

Q4

1646 free

Capacity 1888 hrs; demand 210 hrs; buffer 32 hrs.

Planning conclusion

Capacity appears under-used. Recheck assumptions or add advisory, monitoring, follow-up or branch coverage where risk justifies it.

Where it fits

From plan to approved capacity

The capacity planner sits after annual planning and before fieldwork resourcing. It shows whether the plan can actually be delivered with available internal hours, specialist capability, quarter loading and co-sourcing support.

Build the plan first with the annual plan generator, then turn selected reviews into SOWs, RCMs and committee dashboards.

How internal audit resource capacity planning works

A risk-based internal audit plan is only credible if the team has enough capacity to execute it. Capacity planning converts FTE, leave, training, administration time and quarter availability into usable audit hours, then compares that supply against approved review hours.

The key point is not only the annual total. A plan may look balanced for the year while Q1 or Q2 is overloaded because statutory compliance, ITGC, P2P and inventory reviews all start together. Quarter loading makes that execution risk visible before the plan is approved.

This planner also separates specialist demand. ERP access, cybersecurity, treasury, tax and data analytics reviews often need skills that are not interchangeable with general internal audit hours. Specialist hours are treated as a subset of planned review hours and are capped accordingly. A visible specialist gap is usually a co-sourcing decision, not just a scheduling problem.

Worked example - the annual plan fits, but Q1 does not

An internal audit team has enough annual hours on paper, but the audit universe puts ITGC, tax compliance and P2P into Q1 because of an ERP rollout and prior findings.

Inputs

Available hours5,400 annual hours

Required hours5,100 hours including buffer

Q1 positionOverloaded because high-risk reviews are clustered

Output

Planning actionMove one review to Q2 or co-source specialist testing

Committee messagePlan is approved with a stated Q1 capacity dependency

Annual utilization alone would miss the problem. Quarter loading shows whether fieldwork, review, management meetings and reporting can realistically happen when the risk calendar requires it.

Common mistakes

Counting 100% of payroll time as audit time

Internal audit leaders spend time on risk assessment, committee meetings, management follow-up, advisory requests, team review and administration. Remove that time before comparing capacity with plan demand.

Treating specialist work as general audit capacity

ITGC, cybersecurity, treasury and tax analytics often need specialist review. General team surplus does not solve a specialist-hour gap unless the skill exists internally.

Ignoring buffer for investigations and management requests

A plan with no buffer will break when fraud alerts, regulator queries, process changes or management special reviews appear during the year.

Approving overloaded quarters

Quarter-level overload leads to rushed fieldwork, weak review notes and delayed reports. Move reviews, add support or reduce low-priority scope before approval.

Frequently asked questions

What is internal audit resource planning?+

It is the process of comparing the approved internal audit plan with available team capacity, quarter availability, review hours, specialist requirements, buffer and co-sourcing assumptions.

How many hours should an internal audit plan include?+

There is no universal statutory number. Hours should follow the audit universe, risk ranking, scope depth, number of entities, systems, locations, data availability and required reporting cadence.

Should internal audit include a planning buffer?+

Yes. Many teams reserve 10-20% for investigations, management requests, follow-up, rework, committee preparation and emerging risks. The exact buffer is a governance judgment.

Can this be used for Section 138 internal audit planning?+

Yes, as a planning aid. Rule 13(2) requires scope, functioning, periodicity and methodology to be formulated with the Audit Committee or Board and the internal auditor. Capacity planning supports that discussion but does not replace approval.

Authoritative sources

MCA

Companies (Accounts) Rules, 2014 - Rule 13 — Rule 13(2) links internal audit scope, functioning, periodicity and methodology to Audit Committee or Board consultation.

ICAI

ICAI IASB - Standards on Internal Audit — ICAI publishes Standards on Internal Audit covering planning, risk management, documentation, reporting and follow-up.

Always confirm against the latest version of the source. Regulations evolve and amendments are common.

Related calculators

Internal audit annual plan generator →Internal audit risk scorer →Cycle-wise internal audit programmes →Internal Audit module →Enterprise internal audit solution →

Share this tool

Last reviewed: 2026-08-30 · For informational purposes only — not professional advice.