ISO 20000 Lead Implementer study plan

Explain the difference between an SMS and ITIL-style process frameworks, and state where ISO/IEC 20000-1 clauses are mandatory ('shall') versus advisory

Map the clause structure of ISO/IEC 20000-1 (scope, normative references, terms, service management system, leadership, planning, support, operation, performance evaluation, improvement) onto a one-page diagram

Define the core vocabulary from the standard's terms clause: service, service management system, service provider, customer, interested party, top management, documented information, nonconformity, corrective action

Identify the 4 service management system clauses that require documented information and list the specific documents each one implies

Distinguish the standard's requirements from ISO/IEC 20000-2 guidance and ISO/IEC 20000-3 scope/ applicability guidance

Draft the scope statement for a fictional service provider, including the services covered and any justified exclusions with rationale

Write a context-of-the-organization analysis identifying internal and external issues, interested parties and their requirements

Construct a service catalogue structure that links each service to its customers, service level targets and supporting components

Describe how leadership and commitment obligations translate into a service management policy and assigned roles, responsibilities and authorities

Identify the documented information required for the SMS to be considered conformant at the clause level

Translate the standard's planning requirements into a risk register with at least 8 risks scored for likelihood and impact, each with a treatment action

Define service management objectives that are measurable, time-bound and assigned to an owner

Build a gap analysis against every 'shall' in the standard, rating each requirement as absent, partial or implemented with evidence notes

Sequence the implementation roadmap into work packages with dependencies and rough effort estimates

Identify resource, competence and awareness needs and record them as plan actions

Design the service level management process: service level agreements, operational level agreements, service review inputs and outputs, and escalation paths

Define an incident and service request management process with severity levels, target resolution times and a major incident procedure

Define a problem management process that links problem records to incidents, known errors and workarounds

Specify change management controls including change categories, risk assessment, approval authority and emergency change handling

Draft the capacity, availability and service continuity planning components and show how they interlock with the service catalogue

Complete the remaining operational processes: supplier management, configuration management and its relationship to the service catalogue, release and deployment, and information security controls

Define the measurement model for each process, choosing indicators that measure outcomes rather than activity volume

Build a service reporting specification naming the audience, frequency, content and decision each report supports

Design the internal audit programme: audit criteria, scope, frequency, auditor competence and independence requirements

Define the management review inputs and outputs required by the standard and prepare a review agenda

Write a nonconformity handling procedure covering identification, correction, root cause analysis, corrective action and effectiveness verification

Apply a root cause technique to 3 realistic nonconformity scenarios and record the resulting corrective actions

Distinguish correction, corrective action and continual improvement, and give a worked example of each from the fictional provider

Define the continual improvement register structure, including opportunity source, priority, owner, target date and evidence of completion

Evaluate how performance evaluation outputs feed the improvement cycle and describe the feedback loop in writing

Assemble the evidence file for each clause, matching every 'shall' to a document, record or interview reference

Conduct a full self-assessment audit against the standard and log every finding with a severity rating

Prepare the audit-readiness briefing for interviewees, covering what auditors probe and how to demonstrate evidence rather than describe intentions

Close or downgrade all high-severity findings from the self-assessment and record the evidence of closure

Rehearse explaining the SMS scope, context, risk treatment and improvement results in under 10 minutes

Simulate a certification audit across stages, covering documentation review, on-site interviews, sampling and finding classification

Answer 120 practice questions spanning all 7 domains under timed conditions and analyse every wrong answer by root cause

Revisit the 3 weakest domains identified by practice scores and rewrite the notes for each in condensed form

Prepare the post-audit plan: how findings become corrective actions and how the improvement register is updated

Summarise the entire SMS in a one-page executive brief suitable for top management