Resource Capacity Forecaster (ISO 27001 Control 8.6)

Overview

Draft and validate the Capacity Management Plan for ISO 27001 Control 8.6. Documents monitoring and adjustment of CPU, RAM, disk and network to ensure availability and prevent denial of service from resource exhaustion. Supports threshold alerts, expansion triggers and LaTeX formula validation for auditor-ready living documents.

Getting Started

Add your source materials to the project workspace, then activate the Resource Capacity Forecaster (ISO 27001 Control 8.6) skill. The agent will guide you through scoping resources, defining baseline and maximum scalable capacity, writing threshold-alert and expansion-trigger narrative, and validating the capacity formula.

Example Conversation

You: We need a Capacity Management Plan for Control 8.6. Our production stack is API servers, Postgres, and Redis. We want alerts at 80% utilization and expansion when sustained above that.

Agent: I’ll draft the plan with a clear scope, baseline capacities, and the threshold formula. I’ll use the standard pattern: utilization as (Current Usage / Maximum Scalable Capacity) × 100, with alert when > 80%.

You: Add the LaTeX formula so auditors can see the logic, then validate it.

Agent: I’ve added the threshold section with the formula in LaTeX. Running utilization_formula_validator on the plan now…

Agent: Validation report:

• Formula Structure: \frac{num}{denom} present — OK
• Formula Semantics: Numerator (Current Usage) and denominator (Maximum Scalable Capacity) — OK
• Formula Logic: Percentage scaling and 80% threshold — OK
• Document Completeness: Narrative mentions threshold alerts and capacity — OK

RESULT: PASS — capacity threshold formula logic is consistent with Control 8.6. The plan is ready for review.

What the Tools Validate

The skill includes one validation tool that runs against the Capacity Management Plan document:

utilization_formula_validator checks capacity-threshold formula logic for audit readiness:

• Formula structure: Document contains LaTeX/math (e.g. $$...$$ or \frac{...}{...}) expressing a ratio
• Formula semantics: Numerator represents current usage (or equivalent); denominator represents maximum scalable capacity (or equivalent)
• Formula logic: Utilization is expressed as a percentage (e.g. × 100) and compared to an explicit threshold (e.g. > 80%)
• Document completeness: Narrative mentions threshold alerts, expansion triggers, or capacity management so the plan reads as a living document

The tool reports ERROR (missing or wrong formula logic), WARNING (weaker semantics or no narrative), or PASS when the formula and narrative align with Control 8.6 expectations.

Output Excerpt

The Capacity Management Plan includes scope, baselines, the threshold formula in LaTeX, and expansion triggers:

## 3. Thresholds and alert triggers

An alert is raised when utilization of a monitored resource exceeds the defined threshold. Utilization is defined as the ratio of current usage to maximum scalable capacity, expressed as a percentage:

$$\text{Alert Trigger} = \frac{\text{Current Usage}}{\text{Maximum Scalable Capacity}} \times 100 > 80\%$$

- **Numerator**: current usage (CPU %, RAM used, disk used) from monitoring.
- **Denominator**: maximum scalable capacity (allocated or ceiling before scale-out).
- **Threshold**: 80%; alerts are raised when the ratio exceeds this value.

Monitoring is performed via [tool]; dashboards and alert history are retained for 12 months.

## 4. Expansion triggers

Capacity is increased when (a) utilization remains above 80% for 3 consecutive review cycles, or (b) a forecast indicates breach within one cycle, or (c) an approved change request requires additional capacity. All expansion actions are recorded in the change log and linked to this plan.

The formula is validated by utilization_formula_validator so auditors can verify the logic of your threshold and evidence linkage.