ISO/IEC 20000-1: IT Service Management Systems (ITSM)

Understand how internal and external issues, along with stakeholders, shape the scope of the service management system and influence its delivery, with periodic management reviews for improvement.

Identify interested parties and their requirements that affect the service management system. Review and update stakeholders like customers, suppliers, regulators, and partners to reflect contracts and legal needs.

Define the scope of the service management system to specify included services, locations, customers, and third-party responsibilities, ensuring clear boundaries and documented scope.

Top management demonstrates leadership and commitment to the service management system by setting policy, aligning objectives, allocating resources, and integrating processes to continually improve value for customers and the organization.

Document the service management policy, communicate it within organization, tailor it to organization's context as a framework for setting objectives and continual improvement, reflecting top management's commitment to satisfy requirements.

Top management assigns and communicates responsibilities and authorities for key service management roles. Service owner, process owner, process manager, and management representative ensure lifecycle accountability and report performance.

Identify and address risks and opportunities for the service management system through risk assessment (identification, analysis, evaluation, treatment), considering internal and external issues and stakeholder needs under top management accountability.

Establish service management objectives at relevant functions and levels, aligned with policy and strategy. Make them measurable and consider applicable legal and contractual requirements.

Define and maintain a service management plan within ISO/IEC 20000-1:2018, outlining scope, obligations, resources, roles, risks, audits, and KPIs to guide service delivery and continual improvement.

The lecture outlines how the top management must ensure resources: human, technical, information, and financial—and cover competence, awareness, communication, documented information, and knowledge to support the service management system.

Identify the necessary competence for people under the organization's control, including suppliers, ensure gaps are filled through training, mentoring, reassignment, or hiring, and evaluate and document effectiveness.

Raise awareness among personnel about the service management policy, relevant services, and how they contribute to the system, using trainings and discussions to highlight benefits and non-conformance consequences.

Defines internal and external communication requirements for ISO/IEC 20000-1, detailing what, when, with whom, and how to communicate, plus roles, channels, and timely responses.

Examine how documented information supports the service management system, including policies, plans, procedures, records, and external origin documents. Identify mandatory and organization-specific documents, and apply controls for distribution and retention.

The lecture outlines ISO/IEC 20000-1 knowledge as determining, maintaining, and providing access for the service lifecycle. It covers documented and undocumented knowledge and risks from staff loss.

Explore chapter 8 of ISO/IEC 20000-1:2018, outlining how to plan, implement, and control service management processes with performance criteria and retained documentation, plus changes and outsourced process controls.

Coordinate service delivery under ISO/IEC 20000-1:2018 through effective communication among staff and third parties, aligning service management activities, and applying documented procedures when needed, led by service owners or managers.

Identify and document requirements from customers, end-users, and other interested parties; assess criticality to guide resource planning, dependencies, and service level agreements, and align services with policy and objectives.

Document and manage parties in the service lifecycle, including external and internal suppliers and a customer acting as supplier. Ensure accountability, contracts, KPIs, and integrated coordination to deliver expected services.

Create and maintain one or more service catalogues to inform customers about services, distinguishing external and internal catalogs for live and planned services, with essential details and owners.

Identify the assets required to operate the services and ensure they are managed to meet legal and contractual requirements, including hardware, software, equipment, vehicles, licenses, and responsibilities like fleet management.

Identify, record, control, track, and verify configuration items to support service delivery in ISO/IEC 20000-1:2018, distinguishing configuration items from assets. Audit changes and maintain configuration information for service management.

Identify and document customers and users and suppliers, appoint a customer relationship manager, and review service performance to measure satisfaction, identify improvements, and manage complaints.

Master service level management within a service management system by defining SLAs, targets, exceptions, and workload limits with customers, and by monitoring performance through service level managers and analysts.

manage supplier relationships—external and internal—with written contracts, define what is delivered, requirements and obligations, and SLAs, monitor performance, and address sub-supplier risks and disputes.

Understand budgeting and accounting for services, including direct and indirect costs, cost allocation methods, and forecasting costs and income; group services into packages, monitor budgets, and obtain top management approval.

Demand management identifies future demand for services and, with capacity management, adjusts capacity to deliver services that meet customer expectations; it monitors consumption and reports regularly to avoid bottlenecks.

Capacity management ensures sufficient human, hardware, software, information, and financial resources to meet future demand. Monitor usage and trends to support demand management and prevent bottlenecks, preserving service quality.

Learn change management under ISO/IEC 20000-1, governing RFC-driven changes with standard, emergency, and normal categories, including approval, testing, rollback planning, and continual improvement.

Plan, design, build, and transition new or changed services while coordinating removals or transfers. Establish responsibilities, resources, dependencies, acceptance criteria, and testing to ensure successful live deployment.

Explore release and deployment management within service design and transition, linking change management, planning releases, major/minor/emergency releases, deployment methods, acceptance criteria, baselines, and monitoring.

Explain incident management within iso/iec 20000-1: record, classify, prioritize, escalate, and resolve incidents; include service request and problem management, and address major incidents with criteria and post-incident analysis.

Standardize and automate service requests, such as password resets and access requests, by recording, classifying, prioritizing, and fulfilling them, while informing users and reviewing trends.

Problem management analyzes incidents to identify root causes, records and prioritizes issues, and uses known errors and workarounds to reduce service impact, with changes managed under the change policy.

Identify, document, and assess risks to service availability at planned intervals, monitor performance to minimize unavailability, aligning with customer SLAs and contracts while coordinating with capacity management.

Assess risks to service continuity and prepare service continuity plans for major incidents. Define authority, roles, communications, and restoration steps, aligning with the ISO/IEC 20000-1 and the ISO 22301 family.

Delve into information security management within ISO/IEC 20000-1, covering policy development, risk assessment, controls, incident management, and the link with ISO/27001/27002 and TR 20000-7 guidance.

Monitor and measure service performance and the service management system, analyze data, and drive improvements from incidents, requests, nonconformities, and SLAs through internal audits and management reviews.

Conduct planned internal audits of the service management system to verify conformance with ISO/IEC 20000-1, assess implementation, and identify improvements through independent auditors and defined audit plans.

Top management conducts management reviews to ensure the service management system remains adequate, suitable, and effective, and to drive improvements through input on changes, performance, customer feedback, risks, and resources.

Identify and produce the mandatory reports from Annex A of ISO/IEC 20000-2, including customer satisfaction, complaints, service performance against targets, demand and consumption, and major incidents, to support decision making.

Explore how ISO/IEC 20000-1:2018 guides managing nonconformities and corrective actions to improve services and the service management system, including root-cause analysis and retaining documented information.

Learn how continual improvement enhances services and the service management system in ISO/IEC 20000-1:2018. Use a continual improvement register to capture and prioritize opportunities from audits, customer feedback, and incidents.

Organizations obtain ISO/IEC 20000-1 certification via a third-party audit, valid for 3 years with surveillance; individuals may pursue service management professional certification after exams.

Explore the 2011 edition changes of ISO/IEC 20000-1:2018 and the new high level structure guiding integrated management systems, with supplementary resources and certificate requirements.