Methodology : ISO standards

ISO 20000
ISO/IEC 20000 aims at IT Service Management. It describes an integrated set of management processes for the effective delivery of services to the business and its customers.  It is aligned with and complementary to the process approach defined within ITIL from the Office of Government Commerce (OGC).  ISO/IEC 20000 consists of two parts:

ISO/IEC 20000-1:2005 is the formal Specification and defines the requirements for an organisation to deliver managed services of an acceptable quality for its customers. The scope includes: requirements for a management system; planning and implementing service management; planning and implementing new or changed services; service delivery process; relationship processes; resolution processes, control processes and release processes.

ISO/IEC 20000-2:2005 is the Code of Practice and describes the best practices for Service Management processes within the scope of ISO/IEC 20000-1. The code of Practice will be of particular use to organisations preparing to be audited against ISO/IEC 20000 or planning service improvements.

ISO 38500
The objectives of the ISO 38500 standard are to assure stakeholders that they can have confidence in the organization's corporate governance of IT; to guide Directors in governing the use of IT in their organization;  to provide a basis for objective evaluation of the corporate governance of IT.  ISO 38500 is also intended to guide those involved in designing and implementing the management system of those policies and processes that support governance.

The ISO 38500 standard comprises three main sections

• Scope, Application and Objectives
• Framework for Good Corporate Governance of IT
• Guidance for Corporate Governance of IT