From ambition to an auditable management system.
39Security helps your organisation design, implement and improve the management system required by ISO/IEC 20000-1:2018. We focus on practical ownership, evidence and processes that work in normal business operations, not a collection of documents created only for audit day.
Support can include
- Scope and service management system design
- Service catalogue, SLAs and ownership
- Incident, request, change and problem processes
- Supplier and service-level controls
- Internal audit, management review and corrective actions
A proportionate implementation route
- Discovery and scope: understand services, information, AI use, interested parties and business objectives.
- Gap review: map current practices and evidence against the standard's requirements.
- Implementation: create the required controls, ownership, records and operating rhythm.
- Internal assurance: perform internal audit, corrective actions and management review preparation.
- Certification support: prepare for Stage 1 and Stage 2 assessment with an independent certification body.
Important certification distinction
39Security provides readiness, implementation and improvement consultancy. ISO does not certify organisations, and 39Security does not award the certificate. Certification is performed by an independent certification body, ideally one accredited by the relevant national accreditation body.