Guide
ISO/IEC 20000-1 — in brief
ISO/IEC 20000-1 is the international standard for service management systems — most often for IT services. It describes how a service provider plans, delivers, monitors and improves its services so that they meet what has been agreed with its customers.
The current version is ISO/IEC 20000-1:2018, with a 2024 amendment that adds consideration of climate change. The standard is compatible with ITIL practices but, unlike them, contains requirements against which an organisation can be certified by an independent certification body.
Who is ISO/IEC 20000-1 for
The standard is for anyone who provides IT as a service with an agreed service level:
- IT companies and support providers
- Cloud and hosting providers
- Data centres
- In-house IT departments in large organisations
- Managed service providers (MSPs)
- Software developers that provide support under an SLA
What ISO/IEC 20000-1 requires
The standard groups the processes into six areas: service portfolio; relationships and agreements; supply and demand; service design, build and transition; resolution and fulfilment; and service assurance. They include service planning, the service catalogue, asset and configuration management, service level agreements (SLAs), supplier management, budgeting and accounting for costs, demand and capacity management, and release and deployment.
In day-to-day work, the most visible processes are those for incidents, service requests, problems and changes, as well as availability, continuity and information security. Every call goes to the right process, with its own deadlines and owners: an incident means something is not working, and the service is restored as quickly as possible; a request is something standard that is fulfilled under an approved procedure; a problem is something that keeps recurring, so the root cause is sought; a change goes through risk assessment, approval and a rollback plan. Everything is measured, reported to the customer and improved.
The benefits
Customers want to know what they are getting: what availability, how quickly an incident is resolved, who is responsible. An ISO/IEC 20000-1 system turns these promises into agreed levels, measurements and reports — with a clear definition of when downtime starts and ends, whether planned maintenance is included, and what measures apply if a level is not met.
Inside the organisation, it brings order to the work — fewer recurring problems, safer changes, clearer responsibilities and data for management. The certificate is an advantage in tenders and with corporate clients.
How implementation works
- Analysis of the current situationServices, contracts, tools and processes — compared with the requirements.
- Catalogue and SLAsWe describe the services and the agreed service levels — measurable and verifiable.
- ProcessesIncidents, requests, problems, changes, configuration, availability and continuity.
- Measurement and reportingIndicators, reports to customers and service reviews.
- Training and internal auditWe train your team and check the processes in operation.
- Certification auditWe prepare your organisation for the audit by an independent certification body.
What you get
- A service management system
- A service catalogue
- SLA templates with measurable service levels
- Processes for incidents, requests, problems and changes
- An availability and continuity plan
- Reports to customers
- Trained teams and internal auditors
- Preparation for the certification audit