Domain 3 · Objective reference 3A1 · Chapter 13 of 35
Build sustainable program capacity
About 5 minutes · Detailed public baseline effective 2022; the replacement exam starts 3 November 2026 and its exact revised topic/task mapping remains unverified
Session only. Enable saving or download a backup from this course’s hub.
Completion is self-reported and does not certify understanding.
See it · Try it · Recall it
Picture the topic
Remember this: Tools need people process and sustained funding.
Explore the anchors
Provide skills ownership and capacity.
Concept matching activity
Match this task or description to its concept:
Define repeatable operating work.
Choose a concept before checking the explanation.
A quick way to study this topic
- Hide the explanation and redraw these three anchors from memory.
- Explain the difference between the anchors in your own words.
- Apply the distinction to the worked example below. Check the full lesson for assumptions and exceptions.
- Recall it again tomorrow, then after a few days. A memory hint is a retrieval cue, not a replacement for understanding.
Original academy illustrations and fictional exercises. These are learning simulations, not a real virtual machine, network assessment or measure of job readiness. Activities reset when you leave or reload; they do not change quiz scores.
What this chapter explains
- Management concept and decision mechanism
- Turn direction into a delivery plan
Management concept and decision mechanism
Program resources include people, skills, coverage, technology, data, supplier support and decision authority. Capacity planning should consider workload, critical services, handoffs, leave, specialist dependency and recurring obligations. Tool availability does not establish response coverage. Distinguish temporary project delivery from continuing control operations; a roadmap that consumes every analyst can leave existing monitoring and review commitments unsupported. Compare staffing and sourcing options against required outcomes, and include recurring costs and assurance. Record accepted service limitations instead of promising a capability that the operating model cannot deliver.
Turn direction into a delivery plan
A security program coordinates people, processes, and technology to deliver approved security outcomes. Translate strategic priorities into work with owners, resources, milestones, and measures of success. Dependencies matter: a new access review process may first require a reliable identity inventory and clear service ownership.
Build a realistic resource plan. Include operational support, specialist skills, training, supplier assistance, and maintenance as well as project costs. A tool without staff able to configure and respond to it can create the appearance of capability without the intended benefit.
Worked example
A continuously available monitoring product is paired with an explicit response rota, escalation and supplier handoff before a 24-hour service commitment is made.
Check your understanding
Why is headcount alone a weak capacity measure?
Show explanation
It omits skills, workload, coverage hours, dependencies, authority and the actual service outcomes the team must support.
Source and study boundary
Official syllabus source. The reference identifies the topic being taught. Explanations and examples are original academy material; a topic link does not establish independent approval or sufficient exam mastery.