Cyberstudy
PDF p.192 In progress

Capacity Planning Risks

Open PDF at p.192 37 flashcards

Summary

PDF p.192

Capacity planning involves assessing and forecasting resource requirements to meet business objectives. Risks include insufficient staffing, skills gaps, resistance to change, and inadequate technology or infrastructure. Effective capacity planning mitigates these risks, ensuring optimal resource allocation and business continuity.

In plain words

Supplementary — not from your PDF

Poor capacity planning creates risk. Understaffing, skills gaps and no cross-training mean everything depends on a few people. Overloaded systems crash or fall to DoS, and underinvestment leaves security gaps. Workforce changes such as layoffs bring insider and knowledge-loss risks, so offboarding must revoke access. Over-provisioning wastes money and energy. The answer is regular review, monitoring, forecasting and scaling.

Detailed explanation

PDF p.192
  • People Risks
    • Insufficient Staffing/Skills Gaps: Leads to inadequate resource allocation or ineffective utilization.
    • Lack of Cross-Training/Succession Planning: Creates dependency on specific individuals, increasing vulnerability.
    • Resistance to Change: Hinders successful security operations.
    • Communication: Essential for managing expectations and coordinating responses during disruptions.
  • Mitigation Strategies
    • Cross-Training: Develop skills outside primary roles to reduce dependency on specific individuals.
    • Remote Work Plans: Define communication channels, technology requirements, and expectations for remote work.
    • Alternative Reporting Structures: Backup or temporary reporting relationships to reduce single points of failure.
    • Effective Communication: Clear and timely communication channels for accurate information and updates.
  • Technologies for Remote Work
    • VPN: Secure access to internal network and resources.
    • Remote Desktop Software: Access to office computers or virtual desktops.
    • Cloud-Based Tools: Collaboration, document sharing, and communication (e.g., Microsoft 365, Google Workspace).
    • Video Conferencing Software: Virtual meetings and screen sharing (e.g., Zoom, Microsoft Teams).
    • Instant Messaging/Chat Tools: Real-time communication (e.g., Slack, Microsoft Teams).
    • Virtual Phone Systems: Cloud-based phone systems for remote calls.
    • Project Management Tools: Task management and team coordination (e.g., Trello, Asana).
  • Changes in Workforce Capacity
    • Layoffs: Introduce cybersecurity and physical risks.
    • Disgruntled Employees: Potential unauthorized access or misuse of data.
    • Knowledge Transfer: Loss of experienced employees can lead to security gaps.
    • Offboarding Procedures: Ensure proper revocation of access and knowledge transfer.
  • Other Risks of Poor Capacity Planning
    • Technology/Infrastructure
      • Overloaded Systems: Susceptible to crashes, failures, and DoS attacks.
      • Limited Resources: Performance degradation and neglect of security measures.
      • Insufficient Investment: Vulnerability to emerging threats.
    • Physical Security
      • Insufficient Measures: Risk of unauthorized access or theft.
      • Power/Cooling Requirements: Overheating or power failures in datacenters.
      • Future Growth: Limited ability to scale operations.
    • Overestimating Capacity Needs
      • Increased Costs: Unnecessary expenses strain budgets.
      • Inefficient Utilization: Low ROI and operational effectiveness.
      • Higher Energy Consumption: Increased costs and environmental impact.
      • Increased Complexity: Challenges in managing technology and infrastructure.
      • Opportunity Cost: Diverting resources from essential projects.
  • Balanced Approach
    • Regular Review/Update: Capacity plans to adapt to changing circumstances.
    • Techniques: Monitoring, forecasting, and resource scaling.
    • Benefits: Optimize resource allocation and mitigate risks.

Important terms

taken from the text above
Insufficient Staffing/Skills Gaps
Leads to inadequate resource allocation or ineffective utilization.
Lack of Cross-Training/Succession Planning
Creates dependency on specific individuals, increasing vulnerability.
Resistance to Change
Hinders successful security operations.
Cross-Training
Develop skills outside primary roles to reduce dependency on specific individuals.
Remote Work Plans
Define communication channels, technology requirements, and expectations for remote work.
Alternative Reporting Structures
Backup or temporary reporting relationships to reduce single points of failure.
Effective Communication
Clear and timely communication channels for accurate information and updates.
VPN
Secure access to internal network and resources.
Remote Desktop Software
Access to office computers or virtual desktops.
Cloud-Based Tools
Collaboration, document sharing, and communication (e.g., Microsoft 365, Google Workspace).
Video Conferencing Software
Virtual meetings and screen sharing (e.g., Zoom, Microsoft Teams).
Instant Messaging/Chat Tools
Real-time communication (e.g., Slack, Microsoft Teams).
Virtual Phone Systems
Cloud-based phone systems for remote calls.
Project Management Tools
Task management and team coordination (e.g., Trello, Asana).
Layoffs
Introduce cybersecurity and physical risks.
Disgruntled Employees
Potential unauthorized access or misuse of data.
Knowledge Transfer
Loss of experienced employees can lead to security gaps.
Offboarding Procedures
Ensure proper revocation of access and knowledge transfer.
Overloaded Systems
Susceptible to crashes, failures, and DoS attacks.
Limited Resources
Performance degradation and neglect of security measures.
Insufficient Investment
Vulnerability to emerging threats.
Insufficient Measures
Risk of unauthorized access or theft.
Power/Cooling Requirements
Overheating or power failures in datacenters.
Future Growth
Limited ability to scale operations.
Increased Costs
Unnecessary expenses strain budgets.
Inefficient Utilization
Low ROI and operational effectiveness.
Higher Energy Consumption
Increased costs and environmental impact.
Increased Complexity
Challenges in managing technology and infrastructure.
Opportunity Cost
Diverting resources from essential projects.
Regular Review/Update
Capacity plans to adapt to changing circumstances.

Examples & real-world scenarios

Supplementary — not from your PDF
  • Cross-training two people on the backup system.
  • Offboarding that disables accounts on the employee's last day.
  • Forecasting bandwidth growth before it saturates.

Scenario

The only person who knows how to restore the ERP system leaves suddenly. Cross-training and documented procedures would have removed this single point of failure.

Common mistakes

Supplementary — not from your PDF
  • Seeing capacity planning as only about hardware. People are a big part of it.
  • Ignoring the risk of over-provisioning (cost, complexity, opportunity cost).

Practical skills

Supplementary — not from your PDF
  • Identify people, technology and infrastructure capacity risks in a scenario.

What I should remember

Key Points PDF p.192
  • People Risks
    • Staffing/Skills Gaps: Inadequate resource allocation.
    • Cross-Training: Reduce dependency.
    • Communication: Manage expectations and responses.
  • Remote Work Technologies
    • VPN, Remote Desktop, Cloud Tools: Secure access and collaboration.
    • Video Conferencing, Messaging, Phone Systems: Communication.
    • Project Management: Task coordination.
  • Workforce Capacity Changes
    • Layoffs: Cybersecurity and physical risks.
    • Offboarding: Proper procedures.
  • Technology/Infrastructure Risks
    • Overloaded Systems: Crashes and failures.
    • Limited Resources: Performance issues.
    • Investment: Protect against threats.
  • Balanced Capacity Planning
    • Review/Update: Adapt to changes.
    • Techniques: Monitoring and forecasting.
    • Benefits: Optimize resources.