Continually improve your business with the world’s most famous service management system

Service Management

In the modern business environment, where organizations increasingly depend on information technologies, the quality of IT services becomes a critical factor of competitiveness and success. Unsatisfactory IT services can lead to business disruption, user dissatisfaction, loss of productivity, and reputational damage. On the other hand, exceptional IT service management creates a competitive advantage, increases user satisfaction, and enables organizations to maximize their technological investments.

The ISO 20000-1 standard is an internationally recognized framework for establishing, implementing, maintaining, and continually improving an IT Service Management System (SMS). This standard provides organizations with a systematic approach to IT service management, ensuring that services meet the needs of the business and users, are delivered efficiently and effectively, and are continually improved.

For IT companies, service providers, internal IT departments, and all organizations providing IT services, ISO 20000-1 represents not only a confirmation of technical competence but also a demonstration of commitment to professional service management. In a time when digital transformation is changing all industries, when cloud computing is becoming the norm, and when users have increasingly high expectations, ISO 20000-1 certification becomes a key differentiator in the market.

This guide provides a comprehensive overview of the ISO 20000-1 standard – from basic concepts and best practices to practical implementation and certification in the EU context.

What is the ISO 20000-1 standard

ISO 20000-1 (full name: ISO/IEC 20000-1:2018 – Information technology – Service management – Part 1: Service management system requirements) is an international standard that specifies requirements for establishing, implementing, maintaining, and continually improving an IT Service Management System (SMS).

Developed by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC), this standard represents the first and only internationally recognized standard for IT Service Management (ITSM) that can be certified. ISO 20000-1 was created based on the British standard BS 15000, which in turn was based on the ITIL (Information Technology Infrastructure Library) best practice framework.

Key characteristics of the standard:

• Based on ITIL principles – ISO 20000-1 is aligned with the ITIL framework, the most widespread set of best practices for IT service management. However, unlike ITIL which is a descriptive framework, ISO 20000-1 sets mandatory requirements that organizations must fulfill for certification.
• Focus on value for users – The standard emphasizes that IT services must be designed and delivered with a focus on satisfying the needs of users and the business, and not just on technical excellence.
• Process approach – ISO 20000-1 requires organizations to manage IT services through well-defined, measurable, and controlled processes that cover the entire lifecycle of the service.
• Continual improvement – The standard requires the establishment of a culture and mechanisms for the continual improvement of IT service quality.
• High Level Structure (HLS) – The current version of the standard (2018) uses a common structure with other ISO management system standards (ISO 9001, ISO 27001, etc.), which facilitates the integration of multiple standards.

The ISO 20000 family of standards:

• ISO 20000-1: SMS Requirements (the only one that can be certified)
• ISO 20000-2: Guidelines on the application of ISO 20000-1
• ISO 20000-3: Guidelines on scope definition
• ISO 20000-5: Exemplar implementation plan for ISO 20000-1
• ISO 20000-6: Requirements for bodies providing audit and certification
• ISO 20000-10: Concepts and terminology
• ISO 20000-11: Guidelines on the relationship between ISO 20000-1 and related frameworks (ITIL, COBIT, etc.)

Key benefits of the ISO 20000-1 standard

Implementing the ISO 20000-1 standard brings numerous concrete benefits:

• Improvement of IT service quality – A systematic approach to service management leads to a more consistent and predictable quality of IT services. Users experience fewer disruptions, faster problem resolution, and a better overall experience.
• Increased user satisfaction – The standard’s focus on user needs and continual improvement naturally leads to a higher level of satisfaction. Measuring and monitoring satisfaction becomes systematic.
• Better alignment of IT with the business – The standard requires that IT services be designed and managed in accordance with business objectives and priorities, ensuring that IT truly contributes to business success.
• Cost reduction – Although the initial implementation requires investment, the systematic approach leads to cost reduction through:
  • More efficient incident resolution
  • Reduction of repeated problems through root cause analysis
  • Better resource utilization
  • Reduction of unplanned downtime
• Increased operational efficiency – Clearly defined processes, roles, and responsibilities eliminate duplication of effort, confusion, and inefficiencies.
• Competitive advantage – ISO 20000-1 certification is becoming an increasingly common requirement in tenders and business contracts, especially with large corporations and in the public sector. Certification can be a deciding factor when choosing an IT provider.
• Better risk management – Proactive management of incidents, problems, and changes reduces the risks of significant business disruptions and IT disasters.
• Demonstration of professionalism – The certificate is a clear, internationally recognized proof that the organization operates according to best practices and the highest standards in the industry.
• Facilitated integration with clients and partners – A common understanding of processes and terminology facilitates communication and collaboration with clients and partners who also use the ITIL/ISO 20000 framework.

Why the ISO 20000-1 standard is important

The importance of the ISO 20000-1 standard stems from several key factors:

• Growing dependence on IT – Modern organizations cannot function without IT services. Email, ERP systems, CRM, cloud applications, mobile applications – all have become critical to daily operations. The quality of these services directly affects productivity, customer satisfaction, and business success.
• Complexity of IT environments – With cloud computing, hybrid infrastructures, mobility, IoT devices, and increasing system integration, IT environments are becoming increasingly complex. Managing this complexity requires a systematic, process-oriented approach.
• User expectations – Users (whether internal or external) have increasingly high expectations when it comes to the availability, performance, and support of IT services. “It just needs to work” has become the basic expectation, not the exception.
• Digital transformation – Organizations are undergoing digital transformation, where IT is not just support but an enabler of new business models. This requires IT to be agile, reliable, and aligned with the business.
• Outsourcing and multi-sourcing – Organizations are increasingly outsourcing IT services or using multiple providers. ISO 20000-1 provides a common language and framework for managing these relationships.
• Regulatory requirements – In some industries (finance, healthcare, public sector), there are regulatory requirements for appropriate IT service management. ISO 20000-1 can help demonstrate compliance.
• Professionalization of the IT industry – The IT industry is maturing and professionalizing. Certificates like ISO 20000-1 are becoming “table stakes” – the minimal standard of professionalism.
• Tender requirements – Increasingly, public and corporate tenders require ISO 20000-1 certification as a mandatory or desirable condition for participation.
• Cloud and SaaS – With the rise of cloud services and SaaS models, the quality of service management becomes the key differentiator between providers.
• DevOps and Agile – Although DevOps and Agile bring speed and flexibility, the need for structured service management remains. ISO 20000-1 can coexist with Agile and DevOps practices.

Key principles of the ISO 20000-1 standard

The ISO 20000-1 standard rests on several fundamental principles:

• Focus on value for the user and business – All IT activities and services must be directed toward delivering value to users and supporting business objectives. Technical excellence in itself is not enough if it does not contribute to business results.
• Process approach – IT services are not managed ad-hoc but through well-defined, documented, measurable, and controlled processes. Each process must have:
  • A clearly defined objective
  • Inputs and outputs
  • Activities and workflows
  • Roles and responsibilities
  • Key Performance Indicators (KPIs)
• Leadership and top management engagement – A successful SMS requires the active support and engagement of top management, who must set the direction, provide resources, and demonstrate a commitment to IT service quality.
• Continual improvement – An SMS is not a static system but must continually evolve through the PDCA (Plan-Do-Check-Act) cycle. Organizations must actively seek opportunities for improvement and learn from incidents, problems, and user feedback.
• Process integration and coordination – Processes do not function in isolation but must be integrated and coordinated to ensure consistent service delivery. For example, Change Management must be linked to Release Management, Incident Management, and Configuration Management.
• Risk-based approach – Organizations must identify and manage risks that can affect the ability to deliver quality IT services. Resources are allocated proportionally to identified risks.
• Evidence-based decision making – Decisions about IT services must be based on data, metrics, and analyses, rather than assumptions or “gut feelings”. The standard requires the collection and analysis of relevant service performance data.
• Relationship management – IT does not operate in a vacuum. The standard emphasizes the importance of managing relationships with:
  • Users (Service Level Management)
  • Suppliers (Supplier Management)
  • Other interested parties
• Service culture – The entire organization must develop a service-focused culture, where everyone understands their role in delivering quality IT services.

Structure of the ISO 20000-1 standard

ISO 20000-1:2018 is organized according to the High Level Structure (HLS), which is common to all newer ISO management system standards:

• Clauses 1-3: Introduction, Scope, Terms and definitions – These sections define the scope of the standard and key terms.
• Clause 4: Context of the organization – Requires the organization to:
  • Understand internal and external factors that affect the SMS
  • Understand the needs and expectations of interested parties
  • Determine the scope of the SMS (which services, processes, locations)
• Clause 5: Leadership – Sets requirements for:
  • Top management engagement and responsibility
  • Service management policy
  • Organizational roles, responsibilities, and authorities
• Clause 6: Planning the SMS – Covers:
  • Actions to address risks and opportunities
  • Service management objectives and planning to achieve them
  • Resource planning
• Clause 7: Support – Defines requirements for:
  • Resources (people, infrastructure, technology, knowledge)
  • Staff competence
  • Employee awareness
  • Communication
  • Documented information (documentation and records)
• Clause 8: Operation – The most extensive clause covering requirements for service management processes organized into three categories:
  • 8.1 Operational planning and control
  • 8.2 Service portfolio management
    • Planning new or changed services
  • 8.3 Relationship and agreement
    • Service Catalogue Management
    • Service Level Management (SLA)
    • Service Continuity Management
    • Service Availability Management
    • Capacity Management
    • Budgeting and Accounting for Services
    • Information Security Management
    • Business Relationship Management
    • Supplier Management
    • Configuration Management
    • Change Management
    • Release and Deployment Management
  • 8.4 Supply and demand
    • Incident Management
    • Service Request Fulfillment
  • 8.5 Service Desk activities
    • The Service Desk function and its role
• Clause 9: Performance evaluation – Requires:
  • Monitoring, measurement, analysis, and evaluation of SMS and service performance
  • Internal audits
  • Management review
• Clause 10: Improvement – Covers:
  • Problem Management
  • Continual improvement of the SMS
  • Management of nonconformities and corrective actions

Key concepts of the ISO 20000-1 standard

Understanding key concepts is essential for successful implementation:

• Service Management System (SMS) – A part of the overall management system of an organization that focuses on the planning, design, delivery, operation, and control of IT services delivered to users.
• IT Service – A means of delivering value to customers by facilitating outcomes customers want to achieve, without the ownership of specific costs and risks. A service is defined from the perspective of what the user receives, not how it is technically realized.
• Service Level Agreement (SLA) – A documented agreement between the service provider and the customer that identifies service level targets, the responsibilities of both parties, and performance metrics. The SLA is the central element of managing expectations and service quality.
• Service Catalogue – A structured document with information on all live services, including their characteristics, target users, prices (if applicable), SLAs, and contact information. The Catalogue serves as a “menu” of available IT services.
• Incident – An unplanned interruption to an IT service or a reduction in the quality of an IT service. The goal of Incident Management is to restore the service to a normal state as quickly as possible.
• Problem – A cause of one or more incidents. Problem Management aims to identify the root cause of incidents and prevent their recurrence.
• Change – The addition, modification, or removal of anything that could have an effect on IT services. Change Management ensures that changes are planned, approved, tested, and implemented in a controlled manner.
• Release – A collection of new or changed configuration items that are tested and introduced into the live environment together. Release Management coordinates and controls the implementation of changes.
• Configuration Item (CI) – Any component that needs to be managed in order to deliver an IT service (hardware, software, documentation, procedure, etc.). Configuration Management maintains a database of all CIs and their relationships.
• Service Desk – The single point of contact between the service provider and users on a day-to-day basis. The Service Desk manages incidents and service requests and provides an interface with other service management processes.
• Continual Service Improvement (CSI) – A structured approach to identifying and implementing improvements to IT services, processes, and the SMS. CSI uses the PDCA cycle and is based on measurement and analysis.
• User vs. Customer – A user is the person who consumes the IT service on a daily basis. A customer is the person who pays for the service and with whom the SLA is negotiated. In an internal IT department, the customer is usually the business leadership.

Areas of application for the ISO 20000-1 standard

ISO 20000-1 can be applied in various contexts and industries:

• IT Service Providers – Companies that provide IT services to other organizations:
  • Managed Service Providers (MSP)
  • Cloud Service Providers
  • Hosting and colocation providers
  • IT Outsourcing companies
  • IT consulting firms with management services
• Internal IT departments – IT departments within organizations that provide services to internal users (employees):
  • Corporate IT departments
  • Public sector IT departments
  • University and educational IT services
• Telecommunications operators – Telecom companies providing communication and IT services.
• Financial institutions – Banks, insurance companies, and other financial organizations with significant IT operations.
• Software as a Service (SaaS) providers – Companies providing cloud-based applications (CRM, ERP, collaboration tools).
• Public sector – Government agencies, ministries, local governments, and public enterprises with IT functions.
• Healthcare sector – Hospitals, clinics, and healthcare organizations with IT systems that support critical medical services.
• Manufacturing and industry – Manufacturing companies with OT/IT systems supporting production.
• E-commerce and retail – Online stores and retail chains with significant IT operations.
• Education – Universities, schools, and educational institutions providing IT services to students and staff.
• Data centers – Data center operators providing infrastructure services.
• BPO (Business Process Outsourcing) companies – Companies providing outsourcing services that rely on IT.

ISO 20000-1 is flexible enough to be applied to organizations of any size – from small IT startups to multinational IT giants, and can cover the entire organization or only specific services or teams.

Benefits of implementing the ISO 20000-1 standard

Implementing ISO 20000-1 brings concrete, measurable benefits:

• Reduction in the number and duration of incidents – Organizations often report a 20-40% reduction in the number of incidents and a decrease in average resolution time after implementing ISO 20000-1, thanks to better processes and proactive Problem Management.
• Increase in service availability – A systematic approach to Availability Management, Capacity Management, and Change Management leads to greater stability and availability of IT services.
• Better predictability and planning – Formal processes for planning, capacity management, and budgeting enable better forecasting of needs and resource allocation.
• Transparency and reporting – Clearly defined KPIs and regular reporting provide visibility into IT service performance for top management and users.
• Improved communication – The Service Catalogue, SLAs, and the Business Relationship Management process improve communication between IT and the business, reducing misunderstandings and conflict situations.
• Faster delivery of new services – A structured approach to designing, testing, and deploying new services can accelerate time-to-market while simultaneously reducing risk.
• Cost optimization – A better understanding of service costs through the Financial Management process enables informed investment decisions and potential optimization.
• Reduction of the risk of major outages – Service Continuity Management and proactive change management reduce the risk of catastrophic IT outages.
• Retaining and attracting talent – A professional, structured IT environment attracts and retains high-quality IT professionals who want to work in well-organized teams.
• Foundation for outsourcing – ISO 20000-1 provides a clear framework for establishing and managing outsourcing relationships, whether you are the provider or the client.
• Easier integration during M&A – During mergers or acquisitions, organizations with ISO 20000-1 can integrate IT operations more easily thanks to a common process framework.

Implementation process of the ISO 20000-1 standard

The implementation of ISO 20000-1 is a structured process typically executed in phases:

• Phase 1: Project initiation and planning (1-2 months)
  • Securing top management support and resource allocation
  • Forming a project team and appointing a Service Manager
  • Defining the SMS scope (which services will be covered)
  • Creating a project plan with phases, deadlines, and responsibilities
  • Communicating about the project throughout the organization
• Phase 2: Gap analysis (1 month)
  • Detailed comparison of current IT processes with ISO 20000-1 requirements
  • Identification of existing processes that can be adapted
  • Identification of processes that are missing or require significant improvements
  • Assessment of the current maturity level of ITSM processes
  • Prioritization of areas for improvement
• Phase 3: SMS design (2-3 months)
  • Development or revision of the service management policy
  • Designing the process model and integration between processes
  • Defining roles and responsibilities (RACI matrices)
  • Development of the Service Catalogue
  • Creation or revision of SLAs
  • Designing a system for monitoring KPIs
• Phase 4: Documentation development (2-3 months)
  • Creation of process procedures and work instructions
  • Development of forms and templates (incident forms, change requests, etc.)
  • Documenting services (Service Catalogue)
  • Creation of plans (Service Continuity, Capacity, etc.)
  • Development of a document management system
• Phase 5: Process implementation (3-4 months)
  • Implementation of the Service Desk function
  • Establishment of the Incident Management process
  • Implementation of the Change Management and Release Management processes
  • Establishment of the Configuration Management Database (CMDB)
  • Implementation of the Problem Management process
  • Establishment of the Service Level Management process
  • Implementation of other processes (Capacity, Availability, Continuity, etc.)
• Phase 6: Tool implementation (2-3 months, parallel with Phase 5)
  • Evaluation and selection of ITSM tools (if replacing existing ones)
  • Configuration of the ITSM tool in accordance with designed processes
  • Integration of the tool with existing systems
  • Testing functionality
  • Data migration (if necessary)
• Phase 7: Training and awareness raising (continuous, 2-3 months)
  • Training IT staff on new/changed processes
  • Training users on the Service Desk and incident reporting procedures
  • Raising awareness of the Service Catalogue and available services
  • Specialized training for specific roles (Change Manager, Problem Manager, etc.)
• Phase 8: Pilot phase and stabilization (2-3 months)
  • Pilot implementation of processes on selected services or in parts of the organization
  • Gathering feedback and fine-tuning processes
  • Resolving identified problems
  • Gradual expansion to all services/teams
• Phase 9: Gathering evidence of operation (3-6 months)
  • SMS operation and record gathering
  • Monitoring KPIs and generating reports
  • Demonstrating that processes truly function in practice
  • A minimum of 3-6 months of operation is usually required before certification
• Phase 10: Internal audits (1-2 months)
  • Planning and conducting internal audits of all processes
  • Identification of nonconformities and weaknesses
  • Implementation of corrective actions
  • Verification of the effectiveness of corrective actions
• Phase 11: Management review (1 month)
  • Comprehensive SMS review by top management
  • Analysis of performance, incidents, problems
  • Making decisions on necessary improvements
• Phase 12: Preparation for certification (1 month)
  • Final check of documentation completeness
  • Verification that all processes have sufficient records
  • Simulation of the certification audit
  • Selection of a certification body and scheduling the audit

The total implementation time usually ranges between 12 and 24 months depending on:

• The size of the organization and the number of services
• The initial maturity level of ITSM processes
• Resource availability and team engagement
• Complexity of the IT environment
• Whether new ITSM tools are being implemented

Certification process for the ISO 20000-1 standard

Certification according to the ISO 20000-1 standard is conducted through a rigorous process:

• Selection of a certification body – The organization chooses an accredited certification body. Selection criteria:
  • Accreditation by a recognized accreditation body
  • Experience in the IT sector and with ISO 20000-1
  • Reputation and references
  • Geographical coverage and availability of auditors
  • Price and flexibility
• Application for certification – The organization submits an application with information on:
  • The scope of the SMS (which services, processes, locations)
  • The number of IT staff
  • Complexity of the IT environment
  • The number of supported users
• Stage 1 Audit – Document review. Auditors perform a preliminary check covering:
  • Review of SMS documentation (policies, procedures, plans)
  • Verification that the SMS scope is clearly defined and appropriate
  • Review of the Service Catalogue and SLAs
  • Verification that all required processes are documented
  • Interviews with the Service Manager and key personnel
  • Verification of readiness for Stage 2 Stage 1 usually lasts 1-2 days and does not result in certification. The goal is to identify any major gaps that would prevent successful certification.
• Resolving findings from Stage 1 – If problems are identified, the organization has 1-3 months to resolve them before Stage 2.
• Stage 2 Audit – Implementation review. This is the main certification audit which includes:
  • Detailed verification of the implementation of all processes in practice
  • Interviews with IT staff at different levels
  • Conversations with users about their experience with IT services
  • Review of ITSM tools and how they are used
  • Analysis of records (incident tickets, change records, problem records, etc.)
  • Review of Service Desk operations
  • Verification that SLAs are tracked and reported
  • Verification that processes for continual improvement are functioning
  • Analysis of KPIs and performance reports Stage 2 usually lasts 2-5 days depending on the size of the organization, the number of services, and the complexity of the IT environment.
• Classification of findings:
  • Major non-conformities: Serious deviations indicating a process does not exist or function, or a systematic failure to meet a requirement
  • Minor non-conformities: Isolated deviations or partial failure to meet a requirement
  • Opportunities for improvement: Suggestions that are not mandatory
• Corrective actions:
  • Major non-conformities must usually be resolved within 90 days before the certificate can be issued. An additional audit may be required.
  • Minor non-conformities should be resolved but do not block the issuance of the certificate. They will be verified during the next surveillance audit.
• Certification decision – After a successful Stage 2 and the resolution of any major non-conformities, the certification body makes the decision to issue the certificate.
• Issuance of the certificate – The organization receives an ISO 20000-1 certificate which:
  • Is valid for 3 years
  • Clearly states the scope of certification (which services)
  • Contains a unique identification number
  • Includes the logo of the accreditation body
• Annual Surveillance Audits:
  • First surveillance audit: 12 months after the initial certification
  • Second surveillance audit: 24 months after the initial certification Surveillance audits are less extensive (usually 1-2 days) but still verify that the SMS continues to function. The focus is on:
  • Process maintenance
  • Resolving previously identified non-conformities
  • Continual improvement
  • New incidents, problems, or changes
• Re-certification (3 years) – Before the expiration of the three-year period, the organization must undergo a re-certification audit which is similar to the initial certification. If successful, the certificate is renewed for another 3 years.

ISO 20000-1 certificate – characteristics and significance

The ISO 20000-1 certificate has several specific characteristics:

• Three-year cycle – Unlike annual certificates, ISO 20000-1 is valid for 3 years with annual surveillance audits, which reduces the administrative burden.
• Clearly defined scope – The certificate precisely defines:
  • Legal entity (organization name)
  • Locations
  • Services covered by the certification
  • Exclusions (if any) This is important because clients know exactly which services are certified.
• International recognition – ISO 20000-1 is the first and only internationally recognized ITSM standard that can be certified. A certificate issued anywhere carries the same validity.
• Accreditation – The certificate must be issued by an accredited certification body to be credible and internationally recognized.
• Complementarity with ITIL – Many organizations combine ITIL staff training/certification with organizational ISO 20000-1 certification. ITIL provides in-depth knowledge and best practices, while ISO 20000-1 provides a formal certificate of compliance.
• Logo and usage – Organizations with a valid certificate may use the ISO 20000-1 logo on:
  • Website and marketing materials
  • Email signatures
  • Tender and sales documentation
  • Business reports
• Detailed audit report – Along with the certificate, the organization receives a comprehensive report containing:
  • All identified non-conformities
  • Examples of good practices
  • Recommendations for improvement
  • Areas that are particularly good or require attention

Importance of the ISO 20000-1 certificate

The ISO 20000-1 certificate carries multifaceted significance:

• Proof of professionalism – In the IT industry where quality claims are common, the ISO 20000-1 certificate is objective, independently verified proof that the organization operates according to best practices.
• Requirement in tenders – An increasing number of tenders, especially in the public sector and with large corporations, require ISO 20000-1 or a similar certificate as a condition for participation. Without the certificate, access to these jobs is impossible.
• Differentiation in a competitive market – In a crowded IT market, the ISO 20000-1 certificate can be a key differentiator that sets an organization apart from the competition.
• Increased client trust – Clients have greater trust in IT providers who can demonstrate their capability through an internationally recognized certificate.
• Easier contracting – With a certificate, the process of negotiating and signing contracts is often faster because clients already trust the provider.
• Foundation for due diligence – In M&A transactions or investments, the ISO 20000-1 certificate is a positive indicator of the operational maturity of the IT function.
• Reduction in the need for multiple audits – Many clients accept the ISO 20000-1 certificate instead of conducting their own detailed provider audits, saving time and resources for both parties.
• Attracting talent – IT professionals prefer to work in well-organized, structured environments. The ISO 20000-1 certificate signals such an organization.
• Insurance policy – For internal IT departments, the certificate can act as “insurance” against criticism and explain to top management that IT operates professionally.
• Global expansion – For companies seeking to expand operations to international markets, ISO 20000-1 is often essential for serious consideration.

Price of the ISO 20000-1 standard

Costs associated with ISO 20000-1 certification vary depending on multiple factors:

• Consulting service costs:
  • Small IT organizations (up to 50 IT staff):
  • Medium IT organizations (50-200 IT staff):
  • Large IT organizations (200+ IT staff): These costs depend on:
  • Scope of services (full implementation vs. partial support)
  • Initial maturity level of ITSM processes
  • Number of services to be covered
  • Complexity of the IT environment
• Certification audit costs: Average costs:
  • Stage 1 audit:
  • Stage 2 audit:
  • Annual surveillance audits: (x2 during the 3-year cycle)
  • Re-certification (after 3 years):
• ITSM tool costs:
  • Entry-level ITSM tools (Freshservice, Jira Service Management):
  • Mid-range tools (TOPdesk, SysAid):
  • Enterprise tools (ServiceNow, BMC Remedy): The choice of tool depends on the size of the organization, complexity of needs, and budget.
• Training costs:
  • ITIL Foundation training for the team:
  • ITIL Practitioner/Intermediate training:
  • ISO 20000-1 Foundation/Practitioner training:
  • Internal employee training:
• Internal resources:
  • Engagement of the project team (project manager, process owners, etc.)
  • IT staff time for procedure development and participation in implementation
  • Top management time
• Annual maintenance costs:
  • Surveillance audit fee:
  • Licensing costs for the ITSM tool:
  • Training costs for new employees:
  • Internal resources for SMS maintenance
• Return on Investment (ROI): Most organizations report a positive ROI through:
  • Reduction in the number and duration of incidents (economy of 20-40%)
  • Increased productivity of the IT team
  • Access to new business and tenders
  • Reduction of risk of major outages
  • Increased user satisfaction and reduction of escalations

If you are interested in the price of the ISO 20000-1 standard, fill out the REQEUST FOR QUOTE and our team will provide you with a personalized price for the ISO 20000-1 standard as soon as possible.

Based on your inquiry, you will receive:

• clear information about the price and duration of the process,
• an explanation of the steps for implementing the standard,
• expert support throughout the entire certification process.

Fill out the form and take the first step towards compliance with the ISO 20000-1 standard and business improvement.

European ISO 20000-1 certificate

For companies in the EU, ISO 20000-1 certification has specific aspects:

• Equal validity – An ISO 20000-1 certificate issued to a company in the EU has the same international recognition as a certificate issued anywhere.
• Growing trend in the IT sector – The EU IT sector, known for its quality and competitiveness, increasingly recognizes the value of ISO 20000-1 certification:
  • IT outsourcing and nearshoring companies
  • Managed Service Providers
  • Cloud and hosting providers
  • Software houses providing support services
  • Telecom operators
• Examples of successful companies – Several leading EU IT companies and telecoms already have ISO 20000-1 certification, which serves as an inspiration and an indicator that certification is achievable.
• Local support – Mobes Group provides support in the English language
• Integration with existing systems – Many EU IT companies already have ISO 27001 or ISO 9001, which can significantly facilitate the implementation of ISO 20000-1 through an integrated approach.
• Competitiveness in the international market – For EU IT companies targeting global markets, ISO 20000-1 is often necessary for serious consideration by international clients.

ISO 20000-1 standard in the EU – legal framework and support

ISO 20000-1 operates within a broader business and regulatory context:

• Voluntary standard – ISO 20000-1 is not legally mandatory in the EU. However, good IT service management can help organizations meet various business and regulatory obligations.
• Public procurement – In public sector tenders, ISO 20000-1 increasingly appears as a mandatory or desirable condition, especially for IT service provision contracts.
• Data protection regulations – Proper management of incidents and changes, required by ISO 20000-1, contributes to compliance with the General Data Protection Regulation (GDPR).
• Information security regulations – ISO 20000-1 and ISO 27001 are complementary. Together, they cover both the security and operational excellence of IT services.
• The role of the European Commission – The Commission monitors the development of the IT sector and occasionally launches initiatives to support the competitiveness of EU IT companies.
• Eurochambres – The Association of European Chambers of Commerce and Industry, through its programs, supports the improvement of service quality, which can include the promotion of international standards.
• DigitalEurope and the European IT association – Associations of IT companies have promoted best practices and international standards as a way to strengthen the competitiveness of the EU IT sector.
• EU funds and projects – EU projects or programs that support digitalization and modernization are occasionally available, which can include support for certification.
• Consulting organizations – Professional consulting companies like Mobes Group play a vital role in knowledge transfer, market education, and practical support for companies.
• Educational institutions – Universities in the EU (e.g., Technical University of Munich, TUM, Delft University of Technology) increasingly include ITSM, ITIL, and ISO 20000 content in their programs, creating personnel with the necessary knowledge.

Maintaining the ISO 20000-1 certificate

Obtaining the certificate is just the beginning – maintenance requires continuous effort:

• Annual surveillance audits – The organization must undergo surveillance audits at the 12th and 24th month after the initial certification, which verify that the SMS continues to function.
• Continuous operation of processes – All processes must continue to function:
  • The Service Desk must continually process incidents and requests
  • Change Management must control all changes
  • Problem Management must analyze incidents and identify root causes
  • SLAs must be tracked and reported
• Regular internal audits – ISO 20000-1 requires regular internal audits of all processes at least once a year.
• Monitoring KPIs – Key performance indicators must be continuously monitored:
  • Number of incidents and average resolution time
  • Percentage of incidents resolved at first contact
  • Number of problems and their resolution
  • Change success rate (% successful vs. unsuccessful)
  • SLA fulfillment
  • User satisfaction
• Incident and problem management – All incidents must be adequately documented and treated, and significant problems analyzed to identify root causes and prevention.
• Change Management – All changes, no matter how small, must go through a formal process of approval, testing, and implementation.
• Service Level Management – SLAs must be regularly measured, reported, and reviewed with users/customers.
• Management reviews – Top management must regularly (usually quarterly) review SMS performance and make strategic decisions.
• Continual Service Improvement – The organization must actively identify opportunities for improvement and implement CSI initiatives.
• Updating documentation – All changes to processes, the organization, or services must be reflected in the documentation.
• Training new employees – All new employees must be trained on relevant processes and their role in the SMS.
• Adapting to changes – When new services, technologies, or locations are added, the SMS must be adapted, and a change to the certification scope may be necessary.
• Re-certification after 3 years – Before the expiration of the three-year period, the organization must undergo a re-certification audit.

Integration with other management systems

The ISO 20000-1 standard can be effectively integrated with other standards:

• ISO 27001 standard (Information Security) – This is the most common integration:
  • Both standards use the High Level Structure
  • Many processes overlap (Incident Management, Change Management, Configuration Management)
  • Shared focus on risk management
  • Organizations often implement both standards simultaneously for a comprehensive approach to IT governance
• ISO 9001 standard (Quality) – Integration is natural:
  • Shared HLS structure
  • Focus on customer/user satisfaction
  • Process-based approach
  • Continual improvement
  • ISO 20000-1 can be viewed as a specialized application of ISO 9001 to IT services
• ISO 22301 standard (Business Continuity) – They are complementary:
  • ISO 20000-1 requires Service Continuity Management
  • ISO 22301 provides a comprehensive BCMS framework
  • Integration enables a holistic approach to resilience
• ISO 55001 standard (Asset Management) – For organizations with significant IT infrastructure:
  • Configuration Management from ISO 20000-1 naturally links with Asset Management
  • Shared focus on optimizing asset lifecycle
• COBIT (Control Objectives for Information and Related Technologies) – COBIT provides a broad IT governance framework, while ISO 20000-1 focuses on operational service management. They can coexist.
• DevOps and Agile – ISO 20000-1 is not in conflict with Agile/DevOps:
  • The standard is flexible and can accommodate different ways of working
  • The key is maintaining control and accountability alongside speed and flexibility
  • Many organizations successfully combine ISO 20000-1 with DevOps practices
• ITIL 4 – ITIL 4 and ISO 20000-1 are highly compatible:
  • ISO 20000-1 dictates “what” (requirements)
  • ITIL 4 provides “how” (best practices)
  • ITIL 4 training + ISO 20000-1 certification is a powerful combination

Advantages of an integrated management system:

• Reduction of duplicated documentation and effort
• A holistic approach to managing the organization
• More efficient resource allocation
• Unified internal audits
• Integrated management reviews

Mobes Group – your partner for ISO 20000-1 certification

Mobes Group is a leading consulting company in the EU with deep experience in implementing ISO 20000-1:

• Specialized expertise in ITSM – The Mobes Group team consists of experts with:
  • ITIL Expert and ITIL 4 Managing Professional certifications
  • Experience implementing ISO 20000-1 in various IT environments
  • Practical experience in IT operations and service management
  • Knowledge of leading ITSM tools (ServiceNow, BMC, Jira Service Management, etc.)
• 360-degree approach – Mobes Group guides clients through the complete journey:
  • Gap analysis: Detailed mapping of the current maturity of ITSM processes
  • Process design: Creating tailored processes that fit your context
  • Tool selection and implementation: Assistance in selecting and configuring ITSM tools
  • Documentation development: Creating practical, functional documentation
  • Training: A comprehensive training program from the Service Desk to management
  • Operational support: Support during the initial operation of processes
  • Internal audits: Preparing the team to conduct audits independently
  • Certification: Guidance throughout the entire certification process
• Practical, non-bureaucratic approach – Mobes Group believes in “just enough” process:
  • Focus on processes that deliver real value
  • Avoiding unnecessary bureaucracy and documentation
  • Adapting the standard to your culture and way of working
  • Solutions that people actually use, not just “paper” for certification
• Experience with various ITSM tools – The team has experience with:
  • Enterprise platforms (ServiceNow, BMC Remedy)
  • Mid-range solutions (TOPdesk, SysAid)
  • Agile tools (Jira Service Management)
  • Open-source solutions
• Support in the English language – All communication, documentation, and training are available in the English language.
• Knowledge transfer and empowerment – The goal is for your team to become independent:
  • “Train the trainer” approach
  • Mentoring internal process owners
  • Documentation that enables independent maintenance
• Integration with other standards – Mobes Group can help integrate ISO 20000-1 with ISO 27001, ISO 9001, or other standards you already have.

Why choose Mobes Group?

• Specialized knowledge of the ITSM domain – Unlike generalist consultants, Mobes Group has deep, specialized knowledge of IT service management, ITIL, and ISO 20000-1.
• Understanding IT culture – The team understands the IT culture and the mindset of IT professionals, which enables effective communication and the acceptance of change.
• Balance between the standard and reality – Mobes Group understands that you live in a real world with constraints. We help you fulfill standard requirements in a way that makes sense for your context.
• Proven references – Successfully completed projects with IT companies, MSPs, and internal IT departments.
• Realistic deadlines – Mobes Group sets realistic deadlines based on experience, not overly optimistic projections.
• Transparency – Clear communication about what you can expect, how much it will cost, and how long it will take.
• Engagement flexibility – From full support to targeted consultations for specific processes or challenges.
• Post-certification support – The relationship doesn’t end with the certificate. We are available for questions, support during surveillance audits, and further improvements.
• Access to best practices – As part of the global ITSM community, Mobes Group brings knowledge of the latest trends and best practices from around the world.

Most common challenges and how to overcome them

• “Bureaucracy vs. agility” – IT teams often fear that ISO 20000-1 will slow everything down. Solution: The standard can be implemented in an agile manner. The key is to correctly balance control and flexibility, use automation, and design lean processes.
• Resistance from IT staff – “More procedures!” Solution: Involving IT staff from the beginning in designing processes, demonstrating how the processes actually make their job easier (they don’t have to reinvent the wheel every time), focusing on value rather than compliance.
• ITSM tools – Selecting and implementing a tool can be overwhelming. Solution: Clearly defining requirements before selecting a tool, choosing a tool that fits your size and complexity (do not buy “top of the line” if you don’t need it), phased implementation of functionality.
• Documentation that isn’t used – Creating “shelfware” documentation. Solution: Creating brief, practical documentation that truly helps people in their work, using visual flow diagrams instead of long texts, keeping documentation where people work (in the ITSM tool).
• Tracking KPIs – Data collection can be tedious. Solution: Automating data collection through the ITSM tool, focusing on a few key metrics rather than every possible one, using dashboards for real-time visibility.
• Change Management slows everything down – The fear that every small change will require a process. Solution: Implementing change categories (Standard, Normal, Emergency) with different levels of rigor, pre-approved “Standard Changes”, automating workflows.
• Overloaded Service Desk – The Service Desk becomes a bottleneck. Solution: Implementing a self-service portal for common requests, automating the resolution of frequent problems, clear escalation rules.
• Continuity after implementation – A drop in focus after certification. Solution: Embedding the SMS into BAU (business as usual), setting continuous improvement goals, regular CSI review meetings.
• Legacy systems – Old systems that cannot be easily controlled. Solution: Focusing on what you can control, documenting constraints, having a plan for gradual modernization.

The future and the ISO 20000-1 standard

The ISO 20000-1 standard continually evolves:

• Greater integration with DevOps and Agile – Future versions of the standard will likely more explicitly address how ISO 20000-1 is applied in DevOps and Agile environments.
• Cloud and multi-cloud – With increasing cloud adoption:
  • Greater focus on managing cloud services
  • Integration with cloud-specific frameworks (AWS Well-Architected, Azure Well-Architected)
  • Managing multi-cloud and hybrid environments
• Automation and AI – Technology will transform ITSM:
  • AI-powered chatbots for the Service Desk
  • Automatic categorization and routing of incidents
  • Predictive analytics for Problem Management
  • Automated remediation
  • AI-assisted decision making in Change Management
• AIOps (Artificial Intelligence for IT Operations) – Using AI and ML for:
  • Automatic anomaly detection
  • Event correlation
  • Predicting incidents before they happen
  • Capacity optimization
• Value Streams and end-to-end focus – Greater emphasis on end-to-end value streams rather than just individual processes.
• Experience Management – Focus on the overall user experience (UX), not just technical metrics.
• Everything as Code – Infrastructure as Code, Configuration as Code, Policy as Code – increasingly applied in ITSM.
• Edge Computing and 5G – New technological trends will require new approaches to service management.
• Sustainable IT – The ecological aspect of IT operations will gain importance, which could be integrated into future versions of the standard.
• Integration with SIAM (Service Integration and Management) – For organizations with multiple providers, the SIAM approach will become more important.

For organizations in the EU, this means that ISO 20000-1 certification is not a static goal but a continuous journey of adaptation to new technologies and approaches.

How to Start?

If you want to introduce the ISO 20000-1 standard into your company, the process is simple:

• Contact Mobes Group – Contact page or send a request for a quote
• Initial Consultation – Our team will analyze your needs and current situation
• Tailored Plan – You will receive a detailed implementation plan tailored to your enterprise
• Implementation – With our support, you will implement all necessary changes
• Certification – We will help you successfully navigate through the certification process

ISO 20000-1 standard

In the digital age where IT services are the backbone of every business, where users expect an “always on, always available” experience, and where competition for IT talent and clients is growing, the ISO 20000-1 standard represents a critical success factor.

ISO 20000-1 certification brings tangible benefits:

• More satisfied users – through consistent, predictable, quality IT services
• A more efficient IT team – through clear processes, roles, and tools
• Access to new business – through an internationally recognized certificate that opens doors
• Risk reduction – through proactive problem and change management

Your journey toward business excellence begins here. Contact Mobes Group today and discover how the ISO 20000-1 standard can improve your business.

Mobes Europe – Elite Consulting Services for ISO Standard Implementation & Certification

Email: info@mobes.eu