I85PREP
⌘ K
ISO 20000 Lead Implementer study materials
ISO 20000 Lead Implementer study resources

ISO 20000 Lead Implementer practice questions

One question at a time. Build your ISO 20000 Lead Implementer understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Fundamental principles and concepts of a service management system

In ISO/IEC 20000-1, what is the primary purpose of a service management system (SMS)?

  1. To document the organizational chart of the IT department
  2. To replace the organization's financial control framework
  3. To certify the technical quality of individual software products
  4. To direct and control the service management activities of the service provider Correct answer.

Explanation

The SMS is the management system that directs and controls the service provider's service management activities, including policies, objectives, processes and governance. It is a management framework, not a product certification or a substitute for corporate control frameworks.

Question 2Fundamental principles and concepts of a service management system

Which statement best describes the relationship between ISO/IEC 20000-1 and ISO/IEC 20000-2?

  1. Part 2 replaces Part 1 for organizations using cloud services
  2. Part 1 contains requirements for an SMS, while Part 2 provides guidance on applying Part 1 Correct answer.
  3. Both parts contain identical normative requirements and are audited separately
  4. Part 1 provides guidance, while Part 2 contains the auditable requirements

Explanation

ISO/IEC 20000-1 is the normative requirements standard against which conformity can be assessed, and ISO/IEC 20000-2 gives guidance on the application of Part 1. Only Part 1 contains requirements that an organization can be audited against.

Question 3Fundamental principles and concepts of a service management system

A service provider defines an SMS scope that excludes its internal payroll application but includes the HR services it delivers to external clients. Which principle does this scope decision illustrate?

  1. The scope may exclude services that are not delivered as services to customers, provided exclusions are documented and justified Correct answer.
  2. The scope must be limited to services delivered from a single data center
  3. The scope may exclude any service the provider finds difficult to manage
  4. The scope must always cover every IT system operated anywhere in the organization

Explanation

The SMS scope is defined by the services delivered to customers and the units providing them; internal systems that do not form part of those services can fall outside scope if the exclusion is documented and does not mislead customers. Scope is not automatically the whole organization nor limited by physical location.

Question 4Fundamental principles and concepts of a service management system

Which pair of concepts does ISO/IEC 20000-1 use to express the difference between what a service delivers and the level of that delivery?

  1. Risk and opportunity
  2. Service and service level Correct answer.
  3. Process and procedure
  4. Asset and configuration item

Explanation

A service is the means of delivering value to the customer, and the service level expresses the measured or agreed characteristics of that delivery. Processes, assets and risks are supporting concepts, not the pairing that captures value versus level of delivery.

Question 5Fundamental principles and concepts of a service management system

According to the service management principles in ISO/IEC 20000-1, which characteristic distinguishes a 'service' from a mere 'product'?

  1. A service is always delivered face to face by staff
  2. A service is defined solely by its cost to the provider
  3. A service delivers value to the customer by facilitating outcomes the customer wants to achieve Correct answer.
  4. A service must be free of any supporting technology

Explanation

A service is defined by the value it delivers by enabling customer outcomes, regardless of whether it is delivered in person or through technology. Products are outputs, whereas services are means of delivering value.

Question 6Fundamental principles and concepts of a service management system

A service provider wants to demonstrate that its SMS supports continual improvement. Which element is most directly required to provide direction and measurable objectives for that improvement?

  1. A copy of the customer's marketing plan
  2. Service management policy and objectives established by top management Correct answer.
  3. The provider's staff holiday schedule
  4. A list of all hardware serial numbers

Explanation

Top management must establish a service management policy and objectives that give direction and a basis for measuring improvement. Inventories and external plans may inform work but do not provide the governing direction required by the SMS.

Question 7Fundamental principles and concepts of a service management system

In the context of ISO/IEC 20000-1, what does 'top management' commitment primarily involve?

  1. Approving every individual incident ticket
  2. Personally performing all service desk activities
  3. Delegating all SMS decisions to an external consultant
  4. Taking accountability for the effectiveness of the SMS and integrating it into the organization's business processes Correct answer.

Explanation

Top management must demonstrate leadership by taking accountability for SMS effectiveness and ensuring it is integrated with the organization's business processes. Delegation to consultants or micromanagement of operational tickets does not satisfy this leadership requirement.

Question 8Fundamental principles and concepts of a service management system

Which of the following best describes a 'process' as used in an SMS?

  1. A contract between the provider and a supplier
  2. A set of interrelated or interacting activities that transforms inputs into outputs Correct answer.
  3. A single software application used by the service desk
  4. A documented organizational structure

Explanation

A process is a set of interrelated or interacting activities that use inputs to produce intended results. Organizational structures, tools and contracts may support processes but are not themselves processes.

Question 9Fundamental principles and concepts of a service management system

A service provider maps its incident management process and finds that the same activity is performed differently by three teams. Which SMS concept most directly addresses the need for consistent, repeatable performance?

  1. A new customer satisfaction survey
  2. A larger service desk headcount
  3. An updated organizational chart
  4. Documented information defining the process and its controls Correct answer.

Explanation

Consistency and repeatability come from documented information that defines the process, its activities and controls, so that it is performed as intended. Adding staff or collecting feedback does not by itself standardize how the process is executed.

Question 10Fundamental principles and concepts of a service management system

Which statement reflects the 'plan-do-check-act' (PDCA) logic as applied to an SMS?

  1. Design the service catalog, then freeze it permanently
  2. Audit the organization once and then stop all monitoring
  3. Delegate planning to suppliers and act only on their reports
  4. Establish objectives and processes, implement them, monitor and measure results, and take actions to improve Correct answer.

Explanation

PDCA in an SMS means planning objectives and processes, implementing them, monitoring and measuring against requirements, and acting to continually improve. Freezing designs or stopping monitoring breaks the cycle, and accountability cannot be shifted entirely to suppliers.

Question 11Fundamental principles and concepts of a service management system

A provider is deciding which services to include in the SMS scope. Which criterion is most consistent with ISO/IEC 20000-1?

  1. Only services that generate the highest revenue
  2. Only services requested by the largest customer
  3. The services delivered to customers and the organizational units that deliver them Correct answer.
  4. Only services supported by a single technology vendor

Explanation

Scope is determined by the services delivered to customers and the units that deliver them, so the SMS covers the management system supporting those services. Revenue, vendor choice or a single customer's preference are not the basis for scope.

Question 12Fundamental principles and concepts of a service management system

What is the role of 'interested parties' in establishing an SMS?

  1. They are irrelevant once the service catalog is published
  2. Their needs and expectations are considered when determining the scope and requirements the SMS must address Correct answer.
  3. They are limited to the internal audit team
  4. They must all be given voting rights on process design

Explanation

The organization determines relevant interested parties and considers their needs and expectations when defining the SMS and its scope. This includes customers, suppliers and regulators, not only internal auditors, and their relevance does not end with the catalog.

Question 13Fundamental principles and concepts of a service management system

Which of the following is the best example of a 'service' as opposed to a 'resource' in the SMS context?

  1. A network switch in a rack
  2. An email collaboration capability delivered to staff with agreed availability and support Correct answer.
  3. A software license key stored in a repository
  4. A server located in the data center

Explanation

A service is a capability delivered to customers with agreed characteristics such as availability and support. Servers, switches and license keys are resources or configuration items that may support a service but are not services themselves.

Question 14Fundamental principles and concepts of a service management system

A service provider states that its SMS covers 'all IT services delivered to external customers from its two data centers'. Which element of SMS scope definition is missing or weak?

  1. A statement of the provider's marketing budget
  2. A list of competitor offerings
  3. Identification of the organizational units and supporting services that deliver those services Correct answer.
  4. The names of individual customer employees

Explanation

A robust scope identifies the services, the organizational units delivering them and any supporting services or suppliers on which delivery depends. Marketing budgets, competitor lists and customer employee names are not scope elements.

Question 15Fundamental principles and concepts of a service management system

Which statement about the applicability of ISO/IEC 20000-1 to organizations of different sizes is correct?

  1. Only public-sector organizations can conform
  2. Only organizations that outsource all services can conform
  3. Only organizations with more than 500 IT staff can conform
  4. The requirements apply to all sizes and types of service provider, with the SMS scaled to the organization's context Correct answer.

Explanation

ISO/IEC 20000-1 is generic and applies to any service provider regardless of size, sector or delivery model; the SMS is scaled to the organization's context and complexity. There is no headcount, outsourcing or sector restriction.

Question 16Fundamental principles and concepts of a service management system

A provider claims conformity with ISO/IEC 20000-1 but has no evidence that its service management objectives are monitored. Which fundamental concept is being neglected?

  1. Configuration baseline management
  2. Service catalog design
  3. Performance evaluation and measurement against objectives Correct answer.
  4. Supplier categorization

Explanation

Objectives must be monitored and measured to show the SMS is effective, which is part of performance evaluation. Without measurement the provider cannot demonstrate that objectives are being achieved, so the conformity claim is unsupported.

Question 17Fundamental principles and concepts of a service management system

What does 'continual improvement' mean within an SMS?

  1. A requirement to replace all technology annually
  2. An ongoing activity to enhance performance, aligned with the organization's objectives Correct answer.
  3. A process owned exclusively by external auditors
  4. A one-time project to fix all known incidents

Explanation

Continual improvement is a recurring activity to enhance SMS and service performance in line with objectives, using evidence such as measurements and audits. It is not a single project, a technology refresh mandate, or the responsibility of auditors.

Question 18Fundamental principles and concepts of a service management system

A provider's service management policy is written but never communicated to staff, and staff cannot explain how their work supports service objectives. Which SMS principle is most clearly failing?

  1. Capacity forecasting techniques
  2. Supplier contract negotiation
  3. Configuration item naming conventions
  4. Leadership and communication of policy and objectives throughout the organization Correct answer.

Explanation

Policy and objectives must be communicated and understood so people know how their work contributes to the SMS. A policy that exists only on paper does not provide direction or align staff behavior with service objectives.

Question 19Fundamental principles and concepts of a service management system

Which statement best captures the concept of 'risk and opportunity' in the SMS?

  1. Risk management is optional and only applies to financial services
  2. Opportunities are ignored because they are not auditable
  3. The organization determines risks and opportunities that can affect service delivery and plans actions to address them Correct answer.
  4. Risks are managed only after an incident has occurred

Explanation

The SMS requires the organization to consider risks and opportunities that could affect its ability to deliver services and achieve objectives, and to plan actions to address them. This is proactive and applies across sectors, not only after incidents.

Question 20Fundamental principles and concepts of a service management system

A provider defines a process for managing service requests but does not assign authority for approving non-standard requests. Which SMS concept is missing?

  1. An external marketing campaign
  2. A new customer portal
  3. A larger service catalog
  4. Defined roles, responsibilities and authorities within the process Correct answer.

Explanation

Processes need defined roles, responsibilities and authorities so decisions such as approving non-standard requests are made consistently. A catalog, portal or marketing effort does not replace the assignment of decision authority.

Question 21Fundamental principles and concepts of a service management system

Which of the following best explains why ISO/IEC 20000-1 requires documented information to be controlled?

  1. To eliminate the need for process measurement
  2. To increase the volume of paperwork for auditors
  3. To ensure the right versions are available where and when needed and that obsolete information is prevented from unintended use Correct answer.
  4. To replace the need for competent staff

Explanation

Control of documented information ensures that current, correct versions are available to those who need them and that obsolete documents are not used unintentionally. It supports consistent operation; it does not substitute for competence or measurement.

Question 22Fundamental principles and concepts of a service management system

A provider treats its SMS as a purely technical project run by the IT infrastructure team, with no involvement from service owners or customers. Which fundamental principle is most at odds with this approach?

  1. The SMS must be integrated with the organization's business and aligned with customer needs Correct answer.
  2. The SMS must be owned solely by the infrastructure team
  3. The SMS must be rebuilt for each new service
  4. The SMS must avoid any customer contact

Explanation

An SMS is a management system that must be integrated with the business and aligned to customer needs, so limiting it to a technical team undermines its purpose. Ownership by one team or isolation from customers contradicts the service-oriented intent.

Question 23Fundamental principles and concepts of a service management system

Which statement correctly distinguishes 'corrective action' from 'continual improvement' in an SMS?

  1. Corrective action is optional, while continual improvement is mandatory only for certified bodies
  2. Continual improvement applies only to suppliers, while corrective action applies to staff
  3. Corrective action and continual improvement are synonyms in the standard
  4. Corrective action eliminates the cause of a nonconformity, while continual improvement enhances performance beyond correcting failures Correct answer.

Explanation

Corrective action addresses the root cause of an existing nonconformity so it does not recur, whereas continual improvement is a broader, ongoing effort to enhance performance. They are related but distinct concepts, and both apply to the organization.

Question 24Fundamental principles and concepts of a service management system

A service provider defines an objective to 'reduce major service outages by 20% within twelve months'. Which characteristic of a well-formed SMS objective does this best illustrate?

  1. It avoids any link to service performance
  2. It is set exclusively by the customer
  3. It is deliberately vague to allow flexible interpretation
  4. It is measurable and time-bound, allowing performance to be evaluated Correct answer.

Explanation

Objectives should be measurable and set against a timeframe so the organization can evaluate whether they are achieved. A quantified target with a deadline supports performance evaluation; vague or unlinked objectives do not.

Question 25Fundamental principles and concepts of a service management system

Which of the following is the clearest example of how the 'system' aspect of an SMS differs from a collection of separate processes?

  1. The system is defined by the number of processes documented
  2. The processes interact and are managed as a coherent whole to achieve service objectives Correct answer.
  3. Each process is run independently with no shared objectives
  4. The system exists only during external audits

Explanation

A management system is more than a set of processes: the processes interact and are managed together to achieve the organization's service objectives. Independence without shared objectives, audit-only existence, or counting documents does not constitute a system.

Question 26Fundamental principles and concepts of a service management system

In ISO/IEC 20000-1, the service management system is described as a set of interrelated or interacting elements of an organization used to establish policies and objectives and processes to achieve those objectives. Which statement best captures what this definition implies for an SMS?

  1. The SMS is a documented contract listing service levels agreed with each customer.
  2. The SMS is a coordinated set of organizational elements working together toward service objectives, not merely a tool or a single process. Correct answer.
  3. The SMS is essentially the service desk application used to log and track incidents and requests.
  4. The SMS is a certificate issued after a successful external audit that confirms service quality.

Explanation

An SMS is a management system, meaning interrelated elements of the organization, including policies, objectives, processes, roles, and resources, that interact to achieve service objectives. It is broader than any single tool, document, or certificate, and its effectiveness depends on how those elements work together.

Question 27Fundamental principles and concepts of a service management system

A service provider is defining roles for its SMS. Top management has assigned an individual to ensure the SMS conforms to ISO/IEC 20000-1, to report on SMS performance, and to promote awareness of customer requirements. Which role does this assignment correspond to?

  1. An external auditor engaged to assess conformity
  2. The change advisory board chairperson
  3. Service owner for each individual service in the service catalogue
  4. A designated management representative with defined SMS responsibility and authority Correct answer.

Explanation

ISO/IEC 20000-1 expects top management to assign responsibility and authority for the SMS to a role that ensures conformity, reports performance, and promotes awareness of customer requirements. This designated representative acts on behalf of top management within the SMS, which is distinct from service ownership, change advisory duties, or external audit.

Question 28Fundamental principles and concepts of a service management system

A provider has documented its SMS scope, policy, and processes, but has never established measurable service management objectives or monitored whether the processes achieve intended results. Which fundamental principle of the SMS is most clearly missing?

  1. The principle that documentation must be kept in a single physical location
  2. The principle that the SMS must operate as a closed technical project with no customer contact
  3. The principle that the SMS must be reviewed and continually improved based on performance and evidence, not just documented Correct answer.
  4. The requirement to outsource all service delivery to an external supplier

Explanation

Documenting an SMS is only a starting point; the system must set measurable objectives, monitor and measure performance, and use that evidence to improve. Without objectives and monitoring, there is no basis for evaluating whether the SMS achieves its intended results or for driving improvement.

Question 29Fundamental principles and concepts of a service management system

A provider is deciding how to treat a risk that a key supplier could fail to meet agreed service levels. The team wants to act in a way that is consistent with ISO/IEC 20000-1's treatment of risk. Which approach best reflects the standard's intent?

  1. Transfer the entire service to the supplier so the provider no longer needs to manage the risk.
  2. Wait until the supplier actually fails, then raise an incident and treat the failure as an operational problem.
  3. Record the risk once in the risk register and take no action, because identifying a risk satisfies the requirement.
  4. Determine and implement actions to address the risk and evaluate whether those actions are effective. Correct answer.

Explanation

ISO/IEC 20000-1 expects the organization to determine risks and opportunities, plan actions to address them, integrate those actions into its processes, and evaluate their effectiveness. Identifying a risk without acting, or waiting for failure, does not meet that intent.

Question 30Service management system requirements

In ISO/IEC 20000-1:2018, which clause contains the requirements for the service management system itself, including context of the organization and leadership?

  1. Annex A, which contains the implementation guidance
  2. Annex B, which contains the service management system requirements
  3. Clause 3, which covers terms and definitions only
  4. Clause 4 through Clause 10, following the High Level Structure Correct answer.

Explanation

ISO/IEC 20000-1:2018 is structured around Clauses 4 to 10 using the High Level Structure shared with other management system standards. Clause 3 is normative terms and definitions, while Annexes A and B are informative guidance. The auditable requirements therefore sit in the main body clauses.

Question 31Service management system requirements

An organization is defining the scope of its service management system. According to ISO/IEC 20000-1:2018, what must the scope statement do?

  1. Be available and maintained as documented information Correct answer.
  2. Be approved annually by an external certification body
  3. Describe the organizational chart of the IT department
  4. List every individual configuration item managed by the organization

Explanation

The standard requires the scope of the SMS to be available and maintained as documented information, and to identify the services and organizational units covered. The scope need not list configuration items or org charts, and it is not approved by the certification body. Documented availability is the key requirement.

Question 32Service management system requirements

Top management is required to demonstrate leadership with respect to the service management system. Which activity best evidences this requirement?

  1. Approving the annual training budget only
  2. Delegating all SMS decisions to an external consultant
  3. Chairing the change advisory board personally
  4. Ensuring SMS requirements are integrated into the organization's business processes Correct answer.

Explanation

Leadership under the High Level Structure means top management ensures the SMS is integrated into the organization's business processes and is compatible with its strategic direction. Delegating everything to an external party does not demonstrate leadership. Chairing a change advisory board is an operational choice, not a required leadership activity.

Question 33Service management system requirements

ISO/IEC 20000-1:2018 requires a service management policy. What must top management do with this policy?

  1. Align it exclusively with supplier contracts
  2. Publish it only after certification is achieved
  3. Keep it confidential to the service management office
  4. Ensure it is communicated within the organization Correct answer.

Explanation

The service management policy must be appropriate to the organization's purpose and context, provide a framework for setting objectives, and be communicated within the organization. Confidentiality to the service management office or publication only after certification would defeat the purpose. Supplier contracts are not the sole basis for the policy.

Question 34Service management system requirements

Which of the following is a required input when the organization establishes its service management objectives?

  1. The results of the most recent internal audit only
  2. The personal preferences of the service desk manager
  3. The number of staff holding ITIL certifications
  4. The requirements of applicable interested parties and the organization's context Correct answer.

Explanation

Service management objectives must be consistent with the policy and take account of applicable requirements and the organization's context. Internal audit results are one possible input but not the only required one. Staff certification counts and individual preferences are not required inputs.

Question 35Service management system requirements

When planning changes to the service management system, what must the organization consider according to the planning clause?

  1. Only who requested the change
  2. The purpose of the change and its potential consequences Correct answer.
  3. Only the cost of the change
  4. Only the schedule of the change

Explanation

The planning requirements direct the organization to consider the purpose of changes and their potential consequences, along with the integrity of the SMS and the resources needed. Considering only cost, schedule, or requester misses the required assessment of consequences and system integrity.

Question 36Service management system requirements

Which statement correctly describes how ISO/IEC 20000-1:2018 treats documented information?

  1. Documented information required by the standard and by the organization must be created and controlled Correct answer.
  2. Only documents explicitly named as records are permitted
  3. Documented information may be maintained only in paper form
  4. All documented information must be retained for a fixed period of ten years

Explanation

The standard requires documented information needed for the effectiveness of the SMS to be created, updated and controlled. It does not prescribe a universal ten-year retention period or a paper-only format. Organizations determine additional documented information as necessary.

Question 37Service management system requirements

What is the primary purpose of the service management system within ISO/IEC 20000-1:2018?

  1. To certify individual service managers
  2. To define the technical architecture of all IT services
  3. To direct and control the organization's service management activities Correct answer.
  4. To replace the organization's quality management system

Explanation

The SMS is the management system that directs and controls the organization's service management activities, covering policy, objectives and processes. It is not a substitute for other management systems, nor a technical architecture document. Certification applies to the organization's SMS, not to individuals.

Question 38Service management system requirements

An organization has defined its SMS scope to cover only its data centre operations, excluding a cloud service used by the same customers. What does ISO/IEC 20000-1:2018 require regarding such exclusions?

  1. Any exclusion must be approved by the customer's legal team
  2. Exclusions are prohibited entirely under the standard
  3. The scope must identify the services covered and any justified exclusions must not affect the organization's ability to meet requirements Correct answer.
  4. Excluded services must still be audited as if in scope

Explanation

The scope must identify the services and organizational units covered, and where requirements are not applicable the organization must justify why and demonstrate they do not affect its ability to ensure conformity. Blanket prohibition or customer legal approval is not what the standard states. Excluded services are not audited as in scope.

Question 39Service management system requirements

A service provider wants to demonstrate that its SMS is integrated with its business planning. Which action most directly satisfies the leadership requirement for integration?

  1. Purchasing a new ticketing tool
  2. Increasing the number of service desk staff
  3. Adding a sentence about IT services to the annual financial report
  4. Aligning service management objectives with the organization's strategic business objectives Correct answer.

Explanation

Integration is demonstrated when service management objectives are consistent with the organization's strategic direction and business objectives. A passing mention in a financial report, headcount changes, or tool purchases do not evidence integration of the SMS with business processes. Alignment of objectives is the clearest evidence.

Question 40Service management system requirements

During a management review, top management examines whether the SMS remains suitable, adequate and effective. Which input is specifically required by ISO/IEC 20000-1:2018?

  1. The salary bands of service desk staff
  2. The vendor's product roadmap
  3. The status of actions from previous management reviews Correct answer.
  4. The marketing plan for the coming year

Explanation

Management review inputs include the status of actions from previous reviews, changes in issues relevant to the SMS, performance and effectiveness information, and feedback from interested parties. Marketing plans, salary bands and vendor roadmaps are not required inputs. Tracking prior actions ensures the review is a continuing cycle.

Question 41Service management system requirements

An organization identifies that a new regulation will affect how it delivers a service. Under the planning clause, how should this be treated?

  1. Ignore it until the next certification audit
  2. Consider it as an issue relevant to the SMS and plan actions to address it Correct answer.
  3. Record it only in the risk register without further action
  4. Delegate it entirely to the legal department without SMS involvement

Explanation

The organization must determine issues, both internal and external, that are relevant to the SMS purpose and that affect its ability to achieve intended results, then plan actions to address them. Ignoring the regulation or recording it without action does not meet the requirement. Delegation without SMS involvement leaves the management system unaddressed.

Question 42Service management system requirements

Which of the following best describes the relationship between the service management policy and service management objectives?

  1. The policy must be rewritten each time an objective changes
  2. Objectives replace the policy once approved
  3. Policy and objectives are unrelated documents
  4. Objectives must be consistent with the policy Correct answer.

Explanation

Service management objectives must be consistent with the service management policy, which provides the framework for setting them. Objectives do not replace the policy, and the policy is not rewritten each time an objective changes. The two are explicitly linked in the standard.

Question 43Service management system requirements

An organization's service management objectives are stated as 'improve customer satisfaction'. What improvement would make this objective more aligned with the requirements of ISO/IEC 20000-1:2018?

  1. Combine it with the financial audit objectives
  2. State it only verbally in team meetings
  3. Remove the objective because satisfaction cannot be measured
  4. Make it measurable and assign responsibility and a timeframe Correct answer.

Explanation

Objectives must be measurable where practicable, monitored, communicated and updated as appropriate, with clear accountability. A vague aspiration such as 'improve customer satisfaction' should be made measurable with a target, owner and timeframe. Removing it or keeping it verbal does not meet the requirement.

Question 44Service management system requirements

What does ISO/IEC 20000-1:2018 require regarding the availability of resources for the service management system?

  1. Resources must be provided only after certification
  2. The organization must determine and provide the resources needed for the SMS Correct answer.
  3. Resources are limited to software licences
  4. Resource decisions are made solely by the service desk

Explanation

The organization must determine and provide the resources needed to establish, implement, maintain and continually improve the SMS. This includes people, infrastructure and information, not just software licences. Resource provision is a management responsibility and is not deferred until certification.

Question 45Service management system requirements

An organization maintains an SMS scope statement that names the services covered but does not identify which organizational units deliver them. Why is this a gap?

  1. The scope must be signed by every employee
  2. The scope must identify the organizational units to which the SMS applies Correct answer.
  3. The scope must list all customers by name
  4. The scope must include budget figures

Explanation

The scope of the SMS must identify the services and the organizational units covered so that the boundaries of the management system are clear. Customer names, budget figures and employee signatures are not required contents of the scope statement. Identifying units prevents ambiguity about which parts of the organization are audited.

Question 46Service management system requirements

How should the organization treat interested parties when establishing its service management system?

  1. Determine relevant interested parties and their relevant requirements Correct answer.
  2. Ignore interested parties because they are outside the SMS
  3. Consider only shareholders and regulators
  4. Consider only parties named in customer contracts

Explanation

The organization must determine the interested parties relevant to the SMS and the requirements of those parties that are relevant to service management. Limiting consideration to shareholders, regulators or contract parties omits relevant stakeholders such as customers and suppliers. This determination feeds the scope and objectives.

Question 47Service management system requirements

A service provider delegates operation of its incident management process to a supplier while retaining accountability. How does ISO/IEC 20000-1:2018 address this arrangement?

  1. Delegation is prohibited for any service management process
  2. The organization retains responsibility for conformity even when processes are outsourced Correct answer.
  3. Accountability transfers entirely to the supplier
  4. The supplier becomes the certified entity for that process

Explanation

Outsourcing a process does not transfer the organization's responsibility for ensuring the process conforms to the standard; accountability remains with the organization. The supplier does not become the certified entity, and accountability cannot be fully transferred. The organization must still govern and monitor the outsourced process.

Question 48Service management system requirements

Which pair of elements best reflects the Plan-Do-Check-Act logic embedded in the SMS requirements?

  1. Planning the SMS and evaluating performance and improvement Correct answer.
  2. Planning and leadership only
  3. Recruitment and payroll
  4. Document control and procurement

Explanation

The SMS follows a continual improvement cycle: planning establishes objectives and processes, operation executes them, performance evaluation checks results, and improvement acts on findings. Planning and leadership alone omit the check and act phases. Document control and procurement, or recruitment and payroll, are not the cycle's core elements.

Question 49Service management system requirements

An internal audit finds that the SMS scope statement has not been updated after a major service was retired. Which requirement is most directly breached?

  1. The requirement to hold monthly team meetings
  2. The requirement to maintain documented information for the scope of the SMS Correct answer.
  3. The requirement to publish a customer newsletter
  4. The requirement to calibrate monitoring equipment

Explanation

The scope of the SMS must be available and maintained as documented information, which means keeping it current as services and organizational units change. Equipment calibration, newsletters and team meetings are not requirements of the standard. Failing to update the scope undermines the clarity of the management system boundaries.

Question 50Service management system requirements

Top management sets a service management objective but assigns no owner, no measure and no review date. Which requirement of the objectives clause is most clearly unmet?

  1. Objectives must be identical across all departments
  2. Objectives must be measurable, monitored, communicated and updated, with accountability assigned Correct answer.
  3. Objectives must be kept confidential from staff
  4. Objectives must be approved by the certification body

Explanation

The objectives clause requires objectives to be consistent with policy, measurable where practicable, monitored, communicated, and updated as appropriate, with responsibility assigned. Certification body approval, uniformity across departments and confidentiality are not requirements. Without an owner, measure and review date the objective cannot be monitored.