Manage internal audit resources across the function
Manage resources by comparing the function’s commitments with its available capacity, skill mix, funding, and technology. Make the effect of shortages visible and choose a response that protects necessary quality. Headcount is only a starting number; capability and usable time determine what the function can deliver.
A resource gap can have different causes
| Decision | How to apply it | Mistake to avoid |
|---|---|---|
| Capacity gap | Reconcile planned hours with productive time after leave, training, and other commitments. | Assuming every employee is available for all planned hours. |
| Competence gap | Develop, hire, or obtain specialist capability appropriate to the work. | Assigning complex technical work solely because someone has free time. |
| Technology or funding gap | Evaluate tools, access, and budget against risk coverage and efficiency needs. | Buying software without data access or staff able to use its output. |
Capacity gap
Reconcile planned hours with productive time after leave, training, and other commitments.
Avoid: Assuming every employee is available for all planned hours.
Competence gap
Develop, hire, or obtain specialist capability appropriate to the work.
Avoid: Assigning complex technical work solely because someone has free time.
Technology or funding gap
Evaluate tools, access, and budget against risk coverage and efficiency needs.
Avoid: Buying software without data access or staff able to use its output.
A decision path you can use
- 1Quantify demand and usable capacity
- 2Identify skill and technology gaps
- 3Communicate options and coverage effects
Understand the method
Work through the reasoning
Calculate usable capacity rather than nominal headcount
Function-level resource planning begins with the approved work and necessary supporting activities. Paid hours are not all available for engagement fieldwork. Consider leave, training, administration, quality work, supervision, follow-up, and other responsibilities when estimating delivery capacity.
Use explicit assumptions and update them as experience changes. A headcount increase can still leave a specialist bottleneck, while better scheduling may release capacity without adding staff. The relevant question is whether the available resources can deliver the intended work with appropriate quality.
Map competence to the assurance portfolio
Identify the knowledge and skills needed across planned engagements and the function’s responsibilities. Compare them with the team’s current and developing capabilities. A skills inventory should be specific enough to distinguish general familiarity from the ability to perform and evaluate complex procedures.
Consider succession and concentration risk. If one person holds all expertise in a critical area, absence or departure can disrupt coverage. Development, recruitment, rotation, and specialist support can address different gaps, but each needs a realistic timeline and oversight.
Evaluate sourcing choices by coverage and quality
Internal staffing, co-sourcing, and external providers can support different needs. Compare competence, objectivity, availability, continuity, cost, and the ability to obtain suitable evidence. A low-priced provider is not economical if its work cannot support the required conclusion.
Retain clear responsibility for direction and quality when work is sourced externally. Define deliverables, access, review, and reporting expectations. Assess the resulting work before relying on it and consider how knowledge will be retained within the function where that matters.
Communicate resource limits as coverage decisions
When resources are insufficient, explain which work or quality activities are affected and the resulting assurance gap. Present options such as reprioritization, timing changes, or additional support with their consequences. This gives the board and senior management a concrete decision rather than an unexplained request for more staff.
Monitor financial, human, and technological resources together. A tool may reduce manual effort but require training, data access, and maintenance. Track whether resource decisions actually improve delivery and quality rather than assuming that spending or headcount alone demonstrates capability.
Original teaching example
Apply the method to a decision
The scenario
Four auditors each have 1,400 productive hours in an illustrative annual model. Planned work requires 6,000 hours, including a specialist procedure nobody can currently perform.
The decision
Available capacity is 5,600 hours, leaving 400 hours uncovered plus a distinct skill gap.
The model helps make the constraint explicit, but the productive-hour assumption must fit the organization. Evaluate prioritization, external support, and capability development. Do not claim the gap is solved merely by buying 400 hours of unrelated expertise.
Independent hypothetical case. It is not an official IIA question, an actual investigation, or a scoring prediction.
A second application
Headcount rises while technical coverage falls
The situation
Two generalists join the team, but the only technology auditor leaves. Management expects more system audits because total headcount increased.
Reason through it
Aggregate capacity and specialist competence moved in different directions. Reassess the portfolio’s skill requirements, available support, and the timing of technical engagements.
Take the decision
Report the specific capability gap and options. More people do not automatically mean more coverage in every risk area.
Original hypothetical teaching case.
Check your understanding
Choose the best answer, then check the reasoning for each alternative. These short learning checks are not a full exam simulation. Answers are not saved or sent.
Questions about this topic
Does co-sourcing always solve a capacity problem?
It can help, but assess competence, independence, coordination, supervision, cost, and access. The provider must address the actual gap and its work must fit the function’s quality expectations.
How does function resource management differ from engagement budgeting?
Function management balances capacity, competence, finances, and technology across the portfolio and supporting responsibilities. Engagement budgeting estimates the resources needed for one defined objective and work program.
Sources and syllabus scope
Prepared by MiloPrep editorial team. Source links checked 2026-10-10. These notes and cases are independent teaching material; the IIA sources do not verify or endorse them.
- IIA expanded syllabus
Establishes the examined topics. Primary domain: Internal Audit Operations (25% of Part 3). This is a domain allocation, not a separate weight for this lesson.
- Global Internal Audit Standards reference
- Locator: Standards 8.2 and 10.1-10.3. Supports the professional requirements cited here; our scenarios and solution steps are original applications. Current IIA Standards resources.
Part 3: Internal Audit Function. Selected learning notes, not complete curriculum coverage. Browse all CIA topics.