ISO/IEC 20000-1:2018 Certification

ISO/IEC 20000-1:2018 is the international standard for an IT Service Management System (SMS), aligned with the process approach of ITIL. It sets consistent requirements for managing IT services — whether delivered internally or outsourced — covering service level management, budgeting, information security, supplier, incident, change and release management. Company Certification International (CCI) certifies SMS implementations under our IAR-112 accreditation, with every certificate verifiable online.

Who needs ISO/IEC 20000-1 certification?

• Managed IT-service providers and outsourced IT support companies
• In-house IT departments wanting to demonstrate consistent, high-quality service delivery
• Data centres, cloud and software providers whose customers require evidence of service management maturity
• Suppliers bidding into contracts that specify ISO/IEC 20000-1 as a requirement

Business benefits

• Cost reduction through more consistent, streamlined IT processes
• A proven, widely recognized IT service management framework aligned with ITIL practice
• Better alignment between business objectives and IT delivery, reducing risk and improving communication
• Independently verified evidence of service management maturity for customers and tenders

Certification requirements

Building an SMS that meets ISO/IEC 20000-1:2018 requires documented service management processes across service level management, capacity and availability management, information security, supplier management, and incident, problem, change and release management. Your organization — or a consultant of your choosing — implements the SMS; CCI's role is the independent assessment.

How certification works

Stage 1 audit

A documentation and readiness review against ISO/IEC 20000-1:2018.

Stage 2 audit

An audit of your SMS in operation, on-site, remote, or blended per IAF MD 4.

Certification decision

A decision maker independent of the audit team decides whether to certify, in line with ISO/IEC 17021-1.

Annual surveillance and the three-year cycle

Certificates are valid three years, with annual surveillance audits and a full recertification audit at the end of the cycle.

What affects your quotation

Audit duration and fees depend on your employee count, number of sites, and the complexity of the IT services in scope, and whether you're certifying alongside ISO 27001 (a common pairing for IT service providers) — see certification cost and audit duration or request a quote using the form on this page.

Accreditation route

CCI issues ISO/IEC 20000-1 certificates under our IAR-112 accreditation. Where a buyer or tender specifically requires a Global ACI MRA (formerly IAF MLA) signatory accreditation, CCI can coordinate certification through our partner certification body instead — see CCI IAR certification vs. MRA-recognized certification.

Why certify with Company Certification International

CCI's role is certification: application review, Stage 1 and Stage 2 audits, an independent certification decision, and ongoing surveillance. CCI does not provide management-system consultancy, documentation drafting or implementation support. Engaging ISOXPERT Management & IT Consultants — an independent consulting and technology firm under common ownership with CCI — any other consultant, or no consultant has no bearing on any certification decision.

Frequently asked questions

How long does ISO/IEC 20000-1 certification take? Typically 6–8 weeks from application to certification decision, subject to readiness.

How much does it cost? See certification cost and audit duration or request a fixed quote using the form on this page.

Can we certify ISO/IEC 20000-1 alongside ISO 27001? Yes — IT service management and information security controls often overlap; see integrated management system certification.

Can we transfer an existing ISO/IEC 20000-1 certificate to CCI? Yes — see transfer of ISO certification.