ISO 20000 Lead Auditor study plan
ISO 20000 Lead Auditor · Give each week a clear focus.
8 weeks · About 7 hours per week
Fundamental principles and concepts of a service management system & Service management system requirements
Map the structure of the service management system (SMS) standard into its clauses and annexes, and label each clause as policy, planning, operation, or evaluation
Define service management vocabulary precisely: service, service management, SMS, service provider, customer, interested party, and continual improvement
Explain how the Plan-Do-Check-Act cycle is applied to an SMS and where each clause sits in the cycle
Distinguish the SMS requirements standard from the associated guidance and code-of-practice parts, and state what an auditor may and may not cite as a requirement
Your checkpoint
A one-page clause map of the SMS standard with every clause tagged by PDCA phase and marked as auditable requirement or guidance, plus a 20-term glossary in your own words
Service management system requirements
Interpret the requirements for establishing service management policy, objectives, and scope, and identify the evidence an auditor would sample for each
Break down the operational requirements for service delivery, relationship management, and resolution processes into auditable criteria
Construct audit test questions that convert a requirement statement into observable evidence
Identify common conformity failures in documented information control and in process ownership and explain why they recur
Your checkpoint
A requirement-to-evidence table covering at least 25 SMS requirements, each with a test question and the type of record that would satisfy it
Fundamental audit concepts and principles
Differentiate audit types (first, second, third party) and audit categories (internal, external, certification) and state the purpose of each
Apply the audit principles of integrity, fair presentation, due professional care, confidentiality, independence, and evidence-based approach to a described scenario
Classify findings as major nonconformity, minor nonconformity, observation, or opportunity for improvement using defined criteria
Explain the roles and responsibilities of client, auditee, auditor, and audit team leader in a given situation
Distinguish audit evidence from audit criteria and audit findings
Your checkpoint
A written classification exercise: 12 short scenarios each judged as conformity, minor nonconformity, major nonconformity, observation, or OFI, with a one-sentence justification citing the principle or definition applied
Preparing an ISO/IEC 20000 audit & Fundamental audit concepts and principles
Draft a complete audit plan for a simulated ISO/IEC 20000 certification audit, including objectives, criteria, scope, schedule, and team assignments
Build a sampling strategy that justifies which services, sites, shifts, and process instances to sample and why
Write a document review checklist and an opening meeting agenda tailored to an SMS audit
Assess auditor competence needs for a specific audit and identify where team expertise gaps must be filled
Your checkpoint
A full audit plan package for a fictional service provider: audit plan, sampling rationale, document review checklist, and opening meeting agenda
Conducting an ISO/IEC 20000 audit
Formulate opening questions and conduct a simulated interview that gathers evidence without leading the auditee
Trace a service incident or change record end to end and document each control point observed
Collect and record objective evidence in a form that survives later challenge, noting source, date, and record identifier
Recognize and respond to audit-trail dead ends, evasive answers, and staged evidence
Write findings that state the requirement, the evidence, and the gap in a single clear statement
Your checkpoint
A mock audit report for one SMS process containing at least six findings written in requirement-evidence-gap format, each traceable to a sampled record
Closing an ISO/IEC 20000 audit
Prepare a closing meeting agenda and deliver a findings summary that is factual and non-attributive
Evaluate a corrective action plan for root cause adequacy and reject plans that only treat symptoms
Draft nonconformity reports that an auditee could act on without further clarification
Explain the audit follow-up and verification process, including what evidence closes a nonconformity
Assemble an audit file that satisfies record retention and confidentiality expectations
Your checkpoint
A closing meeting script plus two complete nonconformity reports with corrective action review notes and a verification plan
Managing an ISO/IEC 2000 audit program
Design an audit programme covering a three-year cycle with risk-based scheduling and resource estimates
Define programme-level performance indicators and describe how audit results feed management review
Identify the competence, impartiality, and confidentiality controls required at programme level
Explain how to handle a complaint about an audit or an auditor, and how to escalate a disputed finding
Your checkpoint
A three-year audit programme document with a risk-based schedule, KPI set, competence matrix, and complaint-handling procedure outline
Fundamental principles and concepts of a service management system & Service management system requirements & Fundamental audit concepts and principles & Preparing an ISO/IEC 20000 audit & Conducting an ISO/IEC 20000 audit & Closing an ISO/IEC 20000 audit & Managing an ISO/IEC 2000 audit program
Complete a full-length timed practice exam and score each domain separately to find weak areas
Re-teach your two weakest domains from your own notes without referring to source material
Rehearse the requirement-evidence-gap finding format under time pressure until it is automatic
Review every glossary term and clause map entry for accuracy and correct anything you misstated
Your checkpoint
A scored practice exam with a per-domain breakdown and a one-page remediation sheet listing the three weakest areas, the corrective study action, and the date it was completed
Milestones
Week 2: You can state any SMS requirement in one sentence and name the record type that would prove conformity, without notes, for at least 20 requirements
Week 4: You can produce an audit plan and sampling rationale for an unfamiliar service provider within 90 minutes, and correctly classify 10 of 12 mixed scenarios
Week 6: You can write a defensible nonconformity report in under 10 minutes and explain what evidence would close it
Week 8: You score at least 80 percent overall on the timed practice exam with no domain below 70 percent, and your remediation sheet is complete