- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000, ISO 27001, SOC 2, HIPAA, PCI DSS and more.
- Standards
- Pricing
- Not published
ISO 20000-1
ISO/IEC 20000-1:2018 is the international standard for a service management system (SMS). It sets requirements for how an organization plans, designs, delivers and improves IT and other services: service catalog and service level management, incident and problem handling, change and release control, capacity, continuity and availability, supplier management, and measurement and improvement.
It follows the same high-level structure as ISO 27001 and ISO 9001, so it is often certified alongside them.
Certification requires a documented SMS: scope, service management policy and objectives, a service catalog and SLAs, documented processes for each clause 8 area, records of incidents, changes and reviews, internal audit results and management review minutes. The auditor checks that the written processes exist, are followed and are measured.
ISO 20000-1 in numbers.
27,332 certificates worldwide.
ISO’s 2024 survey counts 27,332 valid ISO 20000-1 certificates covering 43,277 sites, which places it #8 of the 16 management system standards ISO reports on.
Who has to comply
Voluntary. IT service providers, managed service providers, outsourcers and internal IT functions adopt it when customers or tenders require a certified SMS, especially in public sector and telecom procurement. No statutory trigger.
What the assessor asks to see
SMS scope and service management policy; service catalog and SLAs; process documentation for incident, problem, change, release, configuration, capacity, continuity, availability and supplier management; risk and opportunity register; roles and competence records; service reports and SLA performance data; internal audit program and results; management review minutes; corrective action records; supplier agreements.
Where the requirement sits: ISO 20000-1 7.5 documented information
Every internal policy in one place
AllyMatter is a full system for every internal policy your company keeps, including the ones ISO 20000-1 turns on. Build the whole library in one place, across every department, and prove who has read what.
Start here
Written Information Security Plan: who needs it, what goes in it, how often it is reviewed and who signs it off. Run exactly that in AllyMatter, alongside every other policy your company keeps.
How it works
Every document is approved by someone other than its author, versioned, distributed to the people it covers and acknowledged by name. Sign it where a signature is what the standard wants, send a set out together as a package, and export a dated record of who read which version when an assessor asks.
The written policies this standard turns on live here, with every version and every acknowledgment on the record.
Who helps with ISO 20000-1
Yes. ITSM and ISO consultants run gap assessments, write the SMS documentation, tune tooling (ticketing, CMDB) to the process requirements and prepare for the certification audit. Engagements typically run three to nine months before the Stage 1 audit.
Firms that name this framework in their own material. A listing is not a recommendation. Each firm can confirm its own.
Listed in random order, reshuffled each time the page loads. Firms that pay for a listing are shown at the top, labeled Sponsored.
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000, ISO 27001, SOC 2, HIPAA, PCI DSS and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, ISO 9001, ISO 14001, ISO 45001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000, ISO 27001, SOC 2, HIPAA, PCI DSS and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, ISO 9001, HIPAA, PCI DSS and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 9001, ISO 45001, ISO 42001, ISO 13485 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 9001, ISO 14001, ISO 45001, ISO 13485 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 9001, ISO 14001, ISO 45001, ISO 42001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 9001, GDPR, ISO 14001, ISO 45001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 9001, GDPR, ISO 14001, ISO 45001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, SOC 2, ISO 9001, GDPR and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 9001, PCI DSS, GDPR, ISO 14001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 9001, ISO 14001, ISO 45001, ISO 13131 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 9001, ISO 14001, ISO 45001, ISO 13485 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, SOC 2, ISO 9001, HIPAA, ISO 22301 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, SOC 2, ISO 9001, HIPAA and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 9001, ISO 14001, ISO 45001, ISO 42001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 9001, CMMC, NIST 800-171, ISO 14001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 9001, CMMC, NIST 800-171, ISO 14001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 9001, ISO 13485, AS9100, GMP and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 9001, ISO 14001, ISO 45001, ISO 13485 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, SOC 2, ISO 9001, HIPAA and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, ISO 9001, GDPR, ISO 14001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, SOC 2, ISO 9001, PCI DSS and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, SOC 2, ISO 9001, HIPAA and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, ISO 9001, ISO 14001, ISO 45001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, ISO 9001, ISO 14001, ISO 45001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, ISO 9001, ISO 14001, ISO 45001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, ISO 9001, ISO 14001, ISO 45001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, ISO 9001, ISO 14001, ISO 45001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, ISO 9001, ISO 14001, ISO 45001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, SOC 2, ISO 9001, PCI DSS and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, SOC 2, ISO 9001, HIPAA and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, ISO 9001, ISO 14001, ISO 45001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, ISO 9001, PCI DSS, GDPR and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, ISO 9001, ISO 14001, ISO 45001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, SOC 2, ISO 9001, PCI DSS and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, SOC 2, ISO 9001, HIPAA and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, ISO 9001, GDPR, ISO 14001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, ISO 9001, ISO 14001, ISO 45001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, ISO 9001, ISO 14001, ISO 45001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, ISO 9001, ISO 14001, ISO 45001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, SOC 2, ISO 9001, PCI DSS and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, SOC 2, ISO 9001, ISO 14001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, SOC 2, ISO 9001, PCI DSS and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, ISO 9001, ISO 14001, ISO 45001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, ISO 9001, ISO 14001, ISO 45001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, ISO 9001, PCI DSS, ISO 14001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, SOC 2, ISO 9001, HIPAA and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, ISO 9001, ISO 14001, ISO 45001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, ISO 9001, CMMC, ISO 14001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, ISO 9001, PCI DSS, ISO 14001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, ISO 9001, ISO 14001, ISO 45001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, SOC 2, ISO 9001, HIPAA and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 9001, ISO 14001, ISO 13485, ISO 22301 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, SOC 2, CMMC, NIST 800-171, PCI DSS and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, SOC 2, ISO 9001, PCI DSS and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, ISO 9001, ISO 42001, ISO 22301 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 9001, GDPR, ISO 14001, ISO 22301 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, SOC 2, ISO 9001, PCI DSS, ISO 14001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, SOC 2, HIPAA, CMMC and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, ISO 9001, CMMC, NIST 800-171 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, ISO 9001, CMMC, NIST 800-171 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000, ISO 27001, ISO 9001, CMMC, CIS Controls and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000, ISO 20000-1, ISO 27001, SOC 2, ISO 9001 and more.
- Standards
- Pricing
- Not published
- What they do
- Compliance consulting
- Who they help
- Its website offers consulting for ISO 20000-1, ISO 27001, ISO 9001, ISO 14001, ISO 45001 and more.
- Standards
- Pricing
- Not published
Who assesses ISO 20000-1
An accredited certification body (registrar) operating under ISO/IEC 17021-1 with a scope covering ISO/IEC 20000-1, using ISO/IEC 20000-6 for its own competence requirements. Accredited by National accreditation bodies that are IAF MLA signatories, such as ANAB (US), UKAS (UK) and their peers.
Public register of assessors: iafcertsearch.org ↗
Assessors
Be the first ISO 20000-1 assessor listed here
This page is read by the organizations looking for someone to certify them.
Tools for ISO 20000-1
Tools that name this framework in their own material.
Grouped by type. Inside each group the order is random, reshuffled each time the page loads. AllyMatter, the publisher of this site, is always first.
AllyMatterPolicy management tool, the policy and acknowledgment layerPublisher of this siteQMS and EQMS suites1 tool
Document control for quality systems; ISO 9001, 13485 and AS9100 shops.
Related reading
- ISO 20000-1 IT service management certificationA certification body explains what a service management system has to demonstrate and how the audit cycle runs.DQS
- ISO 20000-1 certification: IT service managementCovers the two-stage assessment, surveillance visits and the documented service commitments an auditor samples.NQA
Independent third-party explainers, chosen by hand. Not affiliated with this site and not paid placements. All links are nofollow.
Need a hand implementing it?
Find a Consultant for ISO 20000-1
Tell us what you need done and we will point you to firms that do this work. Your details go to a firm only when you choose it.
From the publisher
Run the Policy Side of ISO 20000-1 in AllyMatter
Approve the policies ISO 20000-1 asks for, keep every version, and record a named acknowledgment from each person who has to read them.