ISO 20000-1:2018 details requirements for IT Service Management Systems. It is a very useful standard for organizations involved in business of providing IT services to their customers. Using ISO 20000-1 helps ensure that customers implement right practices to safeguard against information security related threats and vulnerabilities.
This standard is divided into many clauses, the major ones being around
Understanding ITSM context of the company
Requirements for company leadership
Planning for risks, objectives, and changes
Resources, competence, awareness, communication and documentation
Operation of service management system
Evaluating performance of the Service Management System
Continual improvement
ISO 20000-1 specifies requirements for the service provider to plan, establish, implement, operate, monitor, review, maintain and improve an SMS. The requirements include the design, transition, delivery and improvement of services to fulfil agreed service requirements.
USGovCert provides 49 predefined standard templates to ease the certification process.
ISO 20000-1 is compatible with other standards and frameworks like IT Infrastructure Library (ITIL) Framework.
Preferred by organizations seeking services from service providers and requiring assurance that their service requirements will be fulfilled.
It provides value to both the Service Provider and the Consumer of those Services.