Information Security, Privacy & IT
ISO/IEC 20000-1:2018 IT Service Management – Lead Auditor
Overview
A professional programme for those who plan, lead and report management-system audits against ISO/IEC 20000-1:2018. It follows the audit principles of ISO 19011 and covers the full audit cycle — from planning and opening meeting to findings, nonconformity grading, reporting and follow-up — through realistic case work and role play.
The standard
About the standard
ISO/IEC 20000-1:2018
IT Service Management System
Specifies what is needed to run a service management system covering the planning, design, hand-over, delivery and improvement of services across their full lifecycle. It applies equally to internal service functions and external providers, including those working within a supply chain, giving customers and auditors a common yardstick for service quality. Its high-level structure mirrors other ISO management-system standards, making it straightforward to combine with methods such as Agile, ITIL or COBIT.
Key objectives
- Provide a repeatable structure for planning, designing and delivering services that meet agreed requirements
- Give customers assurance about the consistency and quality of the services they receive
- Let providers demonstrate service-management capability through independent certification
- Support ongoing monitoring, measurement and review of the service management system
- Allow the framework to sit alongside methods like Agile, Lean, DevOps, ITIL or COBIT
Who uses it
IT service providers and internal IT functions delivering services to customers.
Structure of the standard
1–3Scope, references & terms
Introductory clauses defining the scope of the standard, normative references and key definitions.
4Context of the organisation
Understand internal and external issues, the needs and expectations of interested parties, and the scope of the management system.
5Leadership
Top-management commitment, an appropriate policy, and clearly assigned roles, responsibilities and authorities.
6Planning
Address risks and opportunities, set measurable objectives and plan the actions and changes to achieve them.
7Support
Provide the resources, competence, awareness, communication and documented information the system needs.
8Operation
Plan and control the service portfolio and the service lifecycle — service level, relationship, supply, resolution and control processes — to deliver and improve agreed services.
9Performance evaluation
Monitor, measure, analyse and evaluate; conduct internal audits and management reviews.
10Improvement
Manage nonconformities and corrective action and continually improve the management system.
Learning outcomes
What you will be able to do
- Interpret the requirements of ISO/IEC 20000-1:2018 in an audit context
- Plan an audit programme and an individual audit, including scope, criteria and sampling
- Lead an audit team and conduct opening and closing meetings
- Collect and evaluate objective evidence through interview, observation and document review
- Grade nonconformities and write clear, defensible audit findings
- Prepare the audit report and follow up corrective actions
Who should attend
Auditors, consultants, management representatives and professionals who want to lead first-, second- or third-party audits.
More in Information Security, Privacy & IT
All Information Security, Privacy & IT
Internal AuditorISMS-01Information Security, Privacy & IT
ISO/IEC 27001:2022 Information Security – Internal Auditor
Lead AuditorISMS-02Information Security, Privacy & IT
ISO/IEC 27001:2022 Information Security – Lead Auditor
Lead ImplementerISMS-03Information Security, Privacy & IT
ISO/IEC 27001:2022 Information Security – Lead Implementer
AXIOS · Certification body
Looking for management-system certification?
AXIOS certification is a separate, impartial certification body: audits, certification decisions and the public register of ISO certificates.