ISO/IEC 20000-1 addresses a service management system. Its scope is more than a software product name or a company activity list: it must explain which organisation manages and delivers which services to which customers.

01

Turn the catalogue into a scope statement

Desktop support, application operations and hosting are different services. For each, identify the customer group, responsible unit, locations, operating hours and service level commitments. A department serving internal customers can also be in scope. Replace “all IT services” with the services actually managed; another group company is not automatically covered by the same certificate.

02

Identify control across the supply chain

In a hypothetical support service using an external cloud provider, compare the customer commitment with the supplier commitment. Define escalation, change notification and performance review responsibilities. Outsourcing does not remove the service organisation’s management responsibility. Explain a dependency that cannot be controlled in the scope and applicability review instead of hiding it.

03

Connect the service lifecycle

Link agreed requirements for a new service to its design, transition checks and operating results. Follow an interruption beyond a closed ticket: customer impact, restoration, any relevant problem investigation and subsequent improvement should connect. An approved change should align with implementation and rollback arrangements. These examples explain relationships; they are not a complete list of the purchased standard’s requirements.

04

Prepare information for application review

Provide the legal entity, services, customer types, sites, personnel, supplier dependencies and current system maturity. ISO/IEC 20000-3 guides scope definition; ISO/IEC 20000-6 adds a framework for certification bodies auditing a service management system. The scope and audit time need an explanation based on the actual service arrangement. Application acceptance or an audit report is not a positive certification decision.

05

Separate support from independent certification

Confirm the issuing body, its relevant scope and impartial decision arrangements in writing. ISO does not issue certificates. A service management certificate is not software product approval, a cybersecurity certificate or a guarantee that no outage or security incident will occur. The applicant implements its system and prepares procedures specific to its own operations and operating records. A certification enquiry to Kayra is limited to actual activities and sites, application information, authority and impartiality review; it does not include designing or implementing the client’s management system. The certification body, other parts of the same legal entity and entities under its organisational control cannot offer or provide management-system consultancy; separate contracts do not remove this restriction.

Sources and application limits

Examples are hypothetical. This article does not claim a customer outcome, a fixed fee or timetable, or accreditation authority for Kayra.