ISO/IEC 20000-1 certification, explained
ISO/IEC 20000-1 is the standard for service management systems, used mainly by IT and managed service providers. It describes how to plan, deliver, support and improve services so customers get what was agreed. It suits IT outsourcers, data centres, telecom and shared-service centres. An independent certification body audits the service management system, and the certificate covers a defined set of services.
Updated 5 November 2026
Info. Showing a standard does not mean a partner holds scope for it. How matching works.
Who it may be relevant for
- Managed service providers and IT outsourcers with service level commitments
- Internal IT or shared-service teams serving a large group or government body
- Data centre, hosting and telecom operators
- Providers whose customers ask for a recognised service management system in procurement
What it covers
- Defining the services in scope and the service management system around them
- Service catalogue, service level management and reporting to customers
- Incident, problem, change, release and configuration management
- Capacity, availability and continuity of services
- Supplier and relationship management, plus internal audit and improvement
What it can help with
- A consistent way to deliver and measure services against agreed levels
- Clearer handling of incidents, changes and recurring problems
- A defined view of the services provided, with owners for each
- Evidence for customers comparing providers on service quality
What the pathway means
ISO/IEC 20000-1 is a certifiable management-system standard. An independent certification body audits the service management system through Stage 1, Stage 2, a decision, surveillance audits and recertification. The certificate covers the services named in the scope. Scheme availability for your scope should be checked with the certification body. MIYAAR CONNECT does not audit or certify. We connect your inquiry with independent certification bodies.
Edition. ISO/IEC 20000-1:2018 is the current edition, with Amendment 1:2024 on climate-change considerations. Ask the certification body which text will apply to your audit.
The typical process
Steps and timing vary by body and scope. This is the usual shape, not a promise.
- You and us
Your inquiry
You describe your needs and share the basics.
- Certification body
Application and contract review
The body reviews your scope, sites and size, then quotes.
- Certification body
Stage 1 audit
A readiness review of your management system documentation.
- Certification body
Stage 2 audit
An evaluation of how the system works in practice.
- This part is theirs
Certification decision
Made by the certification body, never by MIYAAR CONNECT.
- Certification body
Surveillance and recertification
Periodic surveillance audits, then recertification at the end of the cycle.
Where it is typically used
- An IT outsourcer standardising incident and change handling across several client accounts
- A shared-service centre formalising service levels for internal departments
- A cloud or hosting provider aligning availability, capacity and customer reporting
What affects cost
- Number of employees
- Number of sites
- Complexity of what you do and its risks
- The number of services, customers and delivery locations included in the scope
- Size of the delivery team and whether service desks run across several time zones
- Dependence on suppliers and sub-contracted services that need to be covered
- Whether the audit is combined with ISO/IEC 27001 to share planning
What affects timing
- Time to define services and service levels and to align process records with them
- Showing evidence that incident, change and problem processes run as written
- Running internal audits and management review before Stage 2
- Auditor availability for IT service management in your region
What to have ready
- A list of services you want covered and the customers they are delivered to
- A short description of your service desk, tooling and main support processes
- Existing service levels, reporting formats or other certificates, described not uploaded
- Any customer requirement that names ISO/IEC 20000-1
- Details of key suppliers involved in delivering the services
Accreditation and recognition
A certificate applies to defined services and a defined delivery organization, so check the scope covers what you buy or sell. Certification bodies are assessed by accreditation bodies for defined scopes. Ask for the certificate number and scope and confirm accreditation with the accreditation body or through the Global Accreditation Cooperation Incorporated (Global ACI) arrangement, which took over from the IAF and ILAC on 1 January 2026. Buyers decide for themselves whether the certificate meets their requirement.
Common questions
Is this the same as ITIL?
Does it cover security?
Can an internal IT team be certified?
Does certification show our uptime?
Related standards
Relevant industries
Useful reading
Sources
- ISO: ISO/IEC 20000-1:2018 service management system requirements (checked 5 November 2026)
Ask about availability for ISO/IEC 20000-1
We review availability for each inquiry. If no verified certification body fits your request, we will tell you plainly.