ISO 20000 Certification: Accredited ISO/IEC 20000-1 Audits for IT Service Providers
Accredited ISO 20000 certification for managed service providers, cloud and hosting firms, data centres, and internal IT teams. A senior auditor leads your Stage 1 and Stage 2 audits. We test your service management processes against real tickets, changes, and SLA reports. You get a fixed-fee quote after a free scoping review.
What Is ISO 20000 Certification?
ISO 20000 certification is independent confirmation that an organization runs a service management system (SMS) that meets ISO/IEC 20000-1:2018. An accredited certification body audits it in two stages. If it conforms, the body issues a certificate for the IT services in your scope.
ISO/IEC 20000 is the international standard for IT service management. It covers how services are planned, designed, moved into production, delivered, and improved to meet agreed requirements. Where ITIL offers guidance, ISO 20000 sets requirements an auditor can test.
Accredify Global is a UAF-accredited certification body under the IAF MLA framework, with ISO/IEC 20000-1 in its accreditation scope. We audit your system, report findings with evidence, and make an independent certification decision. Our impartiality commitments explain how we keep audit and decision separate.
ISO 20000 in 2026: The 2018 Edition, Confirmed, With One Amendment
You certify to ISO/IEC 20000-1:2018. ISO confirmed the edition as current in December 2023, so there is no new version to transition to. A 2024 amendment added climate change to the issues you consider when setting the context of your system.
The 2018 edition moved ISO 20000 onto the same high-level structure as ISO 27001 and ISO 9001. It also gave organizations more freedom in how they meet each process requirement. That makes integrated audits with other ISO standards straightforward.
Source: ISO/IEC 20000-1:2018 (ISO)
Who Needs ISO 20000 Certification?
Most projects start with a tender, an outsourcing contract, or a customer asking for proof of reliable service delivery.
MSPs and IT outsourcers proving consistent delivery to many clients. See our IT industry certification pathway.
Cloud, SaaS, and hosting providers whose customers depend on availability and change control.
Colocation and data centre operators with strict availability and capacity commitments.
Shared service centres and enterprise IT teams serving business units under internal SLAs.
IT suppliers bidding for public contracts that list ISO 20000 as a requirement.
Service desks and technical support operations with high ticket volumes.
In public and enterprise tenders, ISO 20000 often appears next to ISO 27001 and ISO 9001 in the list of required certificates. Holding it can move a bid from "partly compliant" to "fully compliant" on service delivery. It also gives your account managers audited evidence for SLA discussions, instead of self-reported figures.
ISO 20000-1 Requirements: The Clause 8 Processes, and What the Auditor Checks
Clauses 4 to 7, 9, and 10 follow the usual ISO structure. Clause 8 holds the service management processes the auditor samples in detail.
| Process group | Processes included | What the auditor checks |
|---|---|---|
| Service portfolio | Service delivery, service planning, control of other parties, catalogue, asset, and configuration management | A current catalogue, a CMDB that matches reality, and supplier control |
| Relationship and agreement | Business relationship, service level, and supplier management | SLAs agreed and reported, customer reviews, and supplier performance |
| Supply and demand | Budgeting and accounting, demand, and capacity management | Cost tracking, demand forecasts, and capacity plans |
| Design, build, and transition | Change management, service design and transition, release and deployment | Change records, risk assessment, approvals, and post-release reviews |
| Resolution and fulfilment | Incident, service request, and problem management | Ticket samples, priorities, escalations, and root cause records |
| Service assurance | Availability, service continuity, and information security management | Availability data, continuity tests, and security controls for services |
Auditors sample records from your service desk and change tools. Consistent records matter more than long procedures.
ISO 20000 Readiness Checklist: Ten Questions Before Your Audit
If you cannot answer one of these with evidence, fix it before you book your Stage 1 audit.
Scope and governance
- Is the scope clear: which services, customers, and locations?
- Is there a current service catalogue for those services?
- Do SLAs exist for each service, with regular reporting?
- Are suppliers and internal teams that support services under control?
- Have you completed an internal audit and a management review?
Processes and evidence
- Are incidents and requests logged, prioritized, and closed consistently?
- Do major problems have root cause records?
- Are changes risk-assessed and approved before release?
- Does your configuration data match what is actually running?
- Have you tested service continuity for critical services?
The ISO 20000 Certification Process, Step by Step
Six stages from first call to a certificate that stays valid for three years. See our ISO certification process guide for more detail.
Not sure your service management system is ready for Stage 1? A free scoping review tells you before the auditor does.
Book a free scoping reviewWhat Makes an ISO 20000 Audit With Accredify Global Different
The outcomes service managers and IT leaders care about most.
A senior auditor with IT service management experience leads every audit and understands your tools and workflows.
Each finding cites the requirement and the ticket, change, or report behind it.
Your quote covers the audit man-days your scope needs. There are no hidden costs after scoping.
Combine ISO 20000 with ISO 27001 certification or ISO 22301 business continuity in one integrated program.
Cost of ISO 20000 Certification and Timeline
There is no list price. The cost follows the audit man-days your scope needs. A free scoping review gives you a tailored proposal with a fixed fee.
What sets the audit man-days
- Services — how many services and customers are in scope
- People — staff involved in delivering and supporting them
- Sites — service desks, data centres, and delivery centres
- Supply chain — suppliers and internal teams that support services
- Integration — combining with ISO 27001 can reduce total time
How long ISO 20000 certification takes
| Mature service management | About 6–8 weeks to decision |
|---|---|
| Moderate maturity | About 8–10 weeks |
| Complex, multi-site scope | About 10–12 weeks |
After certification: surveillance every year, and recertification in year three.
ISO 20000 vs ITIL, ISO 27001, SOC 2, and ISO 22301
Service providers are often asked for more than one of these. They answer different questions.
| Framework | What it is | How it relates to ISO 20000 |
|---|---|---|
| ITIL 4 | Best-practice guidance and personal qualifications | A common way to meet ISO 20000 requirements; not certifiable for organizations. |
| ISO 27001 | Information security management | Same structure; often certified together by service providers. |
| SOC 2 | A CPA attestation on service organization controls | Preferred by many US customers; overlaps on change and availability controls. |
| ISO 22301 | Business continuity management | Deepens the service continuity requirement in ISO 20000. |
| ISO 9001 | Quality management, any sector | Broader; ISO 20000 is specific to service management. |
EU customers may also ask about NIS2 or DORA. ISO 20000 evidence supports both but does not replace them.
How to Choose an ISO 20000 Certification Body
The questions worth asking before you sign, and how Accredify Global answers them.
| Question to ask | Accredify Global's answer |
|---|---|
| Are you accredited for ISO 20000? | Yes. ISO/IEC 20000-1 is in our UAF accreditation scope, under the IAF MLA framework. |
| Who leads the audit? | A senior auditor with IT service management experience, on every audit. |
| Can you audit remote and multi-site teams? | Yes. We plan remote and on-site time to match how your services run. |
| Will you also build our system? | No. A certification body must stay impartial, so we audit and certify but do not consult. |
| How is it priced? | A fixed-fee quote after a free scoping review. |
| Can customers verify the certificate? | Yes, on our certificate verification page. |
What You Receive With ISO 20000 Certification
Issued for the services and sites in your scope.
Readiness findings to close before Stage 2.
Findings, the evidence behind them, and what to fix first.
Listed so customers and tender teams can confirm it.
Surveillance and recertification dates agreed upfront.
Clear scope text for bids and customer due diligence.
Frequently Asked Questions About ISO 20000 Certification
Straight answers on requirements, ITIL, accreditation, cost, and timeline.
What is ISO 20000 certification?
ISO 20000 certification is independent confirmation that an organization runs a service management system (SMS) that meets ISO/IEC 20000-1:2018. An accredited certification body audits it in two stages. If it conforms, the body issues a certificate for the services in scope.
What is ISO 20000?
ISO/IEC 20000 is the international standard family for IT service management. Part 1, ISO/IEC 20000-1:2018, sets the requirements you certify against. It covers how services are planned, designed, transitioned, delivered, and improved to meet agreed requirements.
Who needs ISO 20000 certification?
Managed service providers, cloud and hosting firms, data centres, IT outsourcers, and internal IT departments use it most. It is often requested in government and enterprise tenders as proof of reliable service delivery against service level agreements.
What are the ISO 20000-1 requirements?
ISO/IEC 20000-1 follows clauses 4 to 10. Clause 8 holds the service management processes. They cover service portfolio, relationships and agreements, supply and demand, design and transition, resolution and fulfilment, and service assurance.
What is the difference between ISO 20000 and ITIL?
ITIL is a framework of best-practice guidance, and individuals take ITIL qualifications. ISO/IEC 20000-1 is an auditable standard, and organizations are certified against it. Many organizations use ITIL practices to meet ISO 20000 requirements.
What is the difference between ISO 20000 and ISO 27001?
ISO 20000 covers IT service management: how services are delivered and supported. ISO 27001 covers information security management. They share the same structure, so many providers certify both in one integrated audit.
Is Accredify Global accredited for ISO 20000?
Yes. Accredify Global is a UAF-accredited certification body under the IAF MLA framework, with ISO/IEC 20000-1 in its accreditation scope. You can check our accreditation in the UAF directory.
How do I get ISO 20000 certification?
Define your service scope, run your service management system with records, and complete an internal audit and a management review. An accredited certification body then runs a Stage 1 readiness audit and a Stage 2 audit before its certification decision.
How much does ISO 20000 certification cost?
The cost depends on the number of audit man-days. These are set by the services in scope, the people involved in delivering them, the sites, and how complex your service chain is. Accredify Global reviews your scope for free and sends a fixed-fee quote.
How long does ISO 20000 certification take?
Most Accredify Global ISO 20000 programs take 6 to 12 weeks from application to decision. Mature service management teams sit at the shorter end; complex multi-site scopes take longer.
How long is an ISO 20000 certificate valid?
An accredited ISO 20000 certificate runs on a three-year cycle, with surveillance audits every year and a recertification audit before it expires.
Can ISO 20000 cover services delivered by suppliers?
Yes, but you remain accountable. ISO/IEC 20000-1 asks you to control other parties involved in the service lifecycle, including suppliers and internal teams. The auditor checks that control through contracts, reviews, and performance data.
Has ISO 20000-1 changed recently?
ISO/IEC 20000-1:2018 was confirmed as current in December 2023. A 2024 amendment added climate change to the issues you consider when setting the context of your system. There is no new edition to transition to.
Can Accredify Global help us implement ISO 20000?
No. As a certification body, we must stay impartial, so we do not design your service management system or write your processes. We audit it, report findings with evidence, and make the certification decision.
Can ISO 20000 be certified with other standards?
Yes. ISO 20000 shares its structure with ISO 27001, ISO 9001, and ISO 22301, so they can be audited together. An integrated audit can reduce total audit time.
Can individuals get ISO 20000 certified?
Not with a certification body. Organizations are certified against ISO/IEC 20000-1. Individuals can take ISO 20000 training courses and exams from training providers, which is a different thing.
Get an Accredited ISO 20000 Certificate Your Customers and Tenders Accept
Tell us about your services, customers, and deadline. We'll confirm your scope, recommend audit dates, and send a fixed-fee quote.
Book your free scoping review →