Audit Program for Information Technology (IT) Service Management System (ITSMS) - ISO/IEC 20000 Standard (Latest Version) [$45.00]

audit of isms
audit of itsms
audit of ismst

Terms & Conditions and Privacy Policy

The ISO/IEC 20000 IT Service Management System (ITSMS) is an international standard that was put in place to provide minimum requirements for the establishment, implementation, maintenance and continuous improvement of IT Service Management System (ITSMS). Every organization wishing to comply and be certified to the ISO/IEC 20000 standard adopt an implementation strategy for its ITSMS based on its needs and objectives, organizational processes, structure and service requirements. The primary objectives of establishing, implementing, maintaining and continually improving the ITSMS within an organization is to ensure that IT services meet the needs and objectives of the business through documentation of service management policies, plans, procedures and their implementation.

To be effective, organization seeking to comply with ISO/IEC 20000 standard must integrate its service management system with the organization’s processes and overall management structures by ensuring that service management is considered and embedded all IT processes, information systems and service delivery management. Regulatory agencies across several industries including financial services, telecommunications, insurance, energy, manufacturing, business services and consulting have mandated the implementation, compliance and certification to ISO/IEC 20000 standard for organizations within their purview. The objective is to ensure continual improvement within the organization by determining whether processes within the scope of the its ITSMS conforms to the organization’s own requirements for ITSMS as well as the control requirements of the ISO/IEC 20000 standard.

core banking app

This book is a do-it-yourself compliance assessment guide for the ISO/IEC 20000 Lead Auditor (LA) and other IT audit & assurance professionals who perform audit of ISO/IEC 20000 IT service management system. It provides a detailed step by step guide on how to audit the ISO/IEC 20000 management system to ensure compliance with the ISO/IEC 20000 standard as well as organization’s own requirement for ISMS. The audit program is updated with the latest control requirements of ISO/IEC 20000:2018 standard.

It serves as an audit program and risk assessment checklists for IT Assurance practitioners and ITSMS Managers with details of test procedures to be performed to confirm compliance with the requirements of the ISO/IEC 20000 management system clauses. It provides the reader with audit steps, description of the ISO/IEC 20000 management clauses, what documents (e.g. policies, procedures, manuals, standards, frameworks, etc.) to request from the audit client for review and what to look out for during the review. Audit program/checklist can easily be integrated with popular audit management software such as teammatessolutions or IdeaGen, RSA Archer, etc.

Intended for organizations desirous of building its IT service management system to conform to the requirements of ISO/IEC 20000 standard. ISO/IEC 20000 Lead Auditors (LA) and Lead Implementer (LI) will find this book very useful for continuous review of their ITSMS and ensuring that they pass their certification and surveillance audits by external auditors. Below is a sample page of the IT service management system audit program/checklist. For full access to the document, you can subscribe to our membership plan or purchase the book by click the Buy Now or Add to Cart button below.

Review the book sample pages and table of content below. Please note that a link to download the eBook in PDF format will be provided to you upon successful payment checkout. However, if you want the book in other reading formats such as .ePub, or .kobi, please Contact US and we will email you a copy of the book in the format of your choice on request.



Customer Reviews System Oxley Technologies
Star Rating Oxley Technologies


Back To Information and Cyber Security Jobs

Learn More About Our Valuable IT Audit Programs/Checklists

Learn More About Our Valuable Risk Assessment & Treatment Templates

Learn More About Leading Practices in Internal Audit Function



IT Audit, IT Risk and Cyber Security eBooks By Nwabueze Ohia



Announcement: Our Book "Auditing Your Information Systems and IT Infrastructure" made it to the Best Database Auditing Books of All Time Ranking By BookAuthority

The best Database Auditing books of all time

Auditing Your Information Systems and IT infrastructure: Practical Audit Programs/Checklists for Internal AuditorsGet Now
IT Infrastructure Risk & Vulnerability Library: A Consolidated Register of Operational & Technology Infrastructure Vulnerabilities for IT Assurance ProfessionalsGet Now
Auditing Your Payment Cards Processes, Systems and Applications: A Step By Step PCIDSS Compliance Audit Program For Brands, Issuers, Acquirers, ProcessorsGet Now
Auditing Your Windows Infrastructure, Intranet And Internet Security: A Practical Audit Program for Assurance ProfessionalsGet Now

Popular Articles

Remote access software are tools used to access or take full control of computing systems from a remote location either to provide support, access files...Learn More
Investing in Information Technology is pivotal to the success of a business and realization of enterprise goals/objectives. To create value for the business using IT.Learn More
Fintech applications such as Online Banking has disrupted the traditional "brick and mortar" banking that we all have been accustomed to over the years. Online Banking application brought about easyLearn More
Audit management software are used to automate the process of auditing. Most standardized audit management software come handy with good audit process automation....Learn More
The 21st century as the information/digital age has presented numerous challenges and opportunities for humanity. From widespread industrial revolution to notable advances in IT.Learn More
The Central Bank of Nigeria (CBN) recently issued a revised circular on the regulatory framework for Unstructured Supplementary Service Data (USSD) for financialLearn More
Cloud computing is the practice of using network of remote computing infrastructures hosted on the Internet to store, manage, and process data for end users....Learn More
Privilege access mgt is one of the critical elements of user access mgt for every organization & building controls around them is vital for security of information/IT assets.Learn More
Cybersecurity threats and attacks are a real-world problem today with thousands of organizational networks and web facing applications being compromised dailyLearn More
Mobile hacking is an exciting field for cybersecurity enthusiast and at the same time lucrative for hackers. This is given significant rise in the number of mobileLearn More
To ensure the security and performance of application database, it is best to adopt security baselines (a.k.a. minimum security requirements) in addition to other operational controlsLearn More
The factor to consider most in determining the cost of vulnerability assessment is the complex nature of client organization & network environmentLearn More
Management systems certifications are tools that helps organziations meet stakeholders requirements (customer, regulatory & legal), reinforce market leadership.Learn More
Protecting Automated Teller Machine (ATM) network end-to-end requires layered approach to security (implementing security at ATM endpoints, physical and logical network)Learn More