ISO 20000 Lead Auditor study materials
ISO 20000 Lead Auditor study resources

ISO 20000 Lead Auditor study plan

ISO 20000 Lead Auditor · Give each week a clear focus.

8 weeks · About 7 hours per week

Week 1

Fundamental principles and concepts of a service management system & Service management system requirements

  • Map the structure of the service management system (SMS) standard into its clauses and annexes, and label each clause as policy, planning, operation, or evaluation

  • Define service management vocabulary precisely: service, service management, SMS, service provider, customer, interested party, and continual improvement

  • Explain how the Plan-Do-Check-Act cycle is applied to an SMS and where each clause sits in the cycle

  • Distinguish the SMS requirements standard from the associated guidance and code-of-practice parts, and state what an auditor may and may not cite as a requirement

Your checkpoint

A one-page clause map of the SMS standard with every clause tagged by PDCA phase and marked as auditable requirement or guidance, plus a 20-term glossary in your own words

Week 2

Service management system requirements

  • Interpret the requirements for establishing service management policy, objectives, and scope, and identify the evidence an auditor would sample for each

  • Break down the operational requirements for service delivery, relationship management, and resolution processes into auditable criteria

  • Construct audit test questions that convert a requirement statement into observable evidence

  • Identify common conformity failures in documented information control and in process ownership and explain why they recur

Your checkpoint

A requirement-to-evidence table covering at least 25 SMS requirements, each with a test question and the type of record that would satisfy it

Week 3

Fundamental audit concepts and principles

  • Differentiate audit types (first, second, third party) and audit categories (internal, external, certification) and state the purpose of each

  • Apply the audit principles of integrity, fair presentation, due professional care, confidentiality, independence, and evidence-based approach to a described scenario

  • Classify findings as major nonconformity, minor nonconformity, observation, or opportunity for improvement using defined criteria

  • Explain the roles and responsibilities of client, auditee, auditor, and audit team leader in a given situation

  • Distinguish audit evidence from audit criteria and audit findings

Your checkpoint

A written classification exercise: 12 short scenarios each judged as conformity, minor nonconformity, major nonconformity, observation, or OFI, with a one-sentence justification citing the principle or definition applied

Week 4

Preparing an ISO/IEC 20000 audit & Fundamental audit concepts and principles

  • Draft a complete audit plan for a simulated ISO/IEC 20000 certification audit, including objectives, criteria, scope, schedule, and team assignments

  • Build a sampling strategy that justifies which services, sites, shifts, and process instances to sample and why

  • Write a document review checklist and an opening meeting agenda tailored to an SMS audit

  • Assess auditor competence needs for a specific audit and identify where team expertise gaps must be filled

Your checkpoint

A full audit plan package for a fictional service provider: audit plan, sampling rationale, document review checklist, and opening meeting agenda

Week 5

Conducting an ISO/IEC 20000 audit

  • Formulate opening questions and conduct a simulated interview that gathers evidence without leading the auditee

  • Trace a service incident or change record end to end and document each control point observed

  • Collect and record objective evidence in a form that survives later challenge, noting source, date, and record identifier

  • Recognize and respond to audit-trail dead ends, evasive answers, and staged evidence

  • Write findings that state the requirement, the evidence, and the gap in a single clear statement

Your checkpoint

A mock audit report for one SMS process containing at least six findings written in requirement-evidence-gap format, each traceable to a sampled record

Week 6

Closing an ISO/IEC 20000 audit

  • Prepare a closing meeting agenda and deliver a findings summary that is factual and non-attributive

  • Evaluate a corrective action plan for root cause adequacy and reject plans that only treat symptoms

  • Draft nonconformity reports that an auditee could act on without further clarification

  • Explain the audit follow-up and verification process, including what evidence closes a nonconformity

  • Assemble an audit file that satisfies record retention and confidentiality expectations

Your checkpoint

A closing meeting script plus two complete nonconformity reports with corrective action review notes and a verification plan

Week 7

Managing an ISO/IEC 2000 audit program

  • Design an audit programme covering a three-year cycle with risk-based scheduling and resource estimates

  • Define programme-level performance indicators and describe how audit results feed management review

  • Identify the competence, impartiality, and confidentiality controls required at programme level

  • Explain how to handle a complaint about an audit or an auditor, and how to escalate a disputed finding

Your checkpoint

A three-year audit programme document with a risk-based schedule, KPI set, competence matrix, and complaint-handling procedure outline

Week 8

Fundamental principles and concepts of a service management system & Service management system requirements & Fundamental audit concepts and principles & Preparing an ISO/IEC 20000 audit & Conducting an ISO/IEC 20000 audit & Closing an ISO/IEC 20000 audit & Managing an ISO/IEC 2000 audit program

  • Complete a full-length timed practice exam and score each domain separately to find weak areas

  • Re-teach your two weakest domains from your own notes without referring to source material

  • Rehearse the requirement-evidence-gap finding format under time pressure until it is automatic

  • Review every glossary term and clause map entry for accuracy and correct anything you misstated

Your checkpoint

A scored practice exam with a per-domain breakdown and a one-page remediation sheet listing the three weakest areas, the corrective study action, and the date it was completed

Milestones

Week 2: You can state any SMS requirement in one sentence and name the record type that would prove conformity, without notes, for at least 20 requirements

Week 4: You can produce an audit plan and sampling rationale for an unfamiliar service provider within 90 minutes, and correctly classify 10 of 12 mixed scenarios

Week 6: You can write a defensible nonconformity report in under 10 minutes and explain what evidence would close it

Week 8: You score at least 80 percent overall on the timed practice exam with no domain below 70 percent, and your remediation sheet is complete