PD ISO/IEC TR 20000-7:2019

1 This document provides guidance on the integrated implementation of a service management system (SMS) as specified in ISO/IEC20000-1 with a quality management system (QMS) as specified in ISO9001 and an information security management system (ISMS) as specified in ISO/IEC27001. It is aimed at those organizations that are intending to either: a) implement ISO9001 when ISO/IEC20000-1 is already implemented, or vice versa; b) implement ISO/IEC27001 when ISO/IEC20000-1 is already implemented, or vice versa; c) implement both ISO9001 and ISO/IEC20000-1 together, or implement both ISO/IEC27001 and ISO/IEC20000-1 together; d) implement ISO/IEC20000-1 , ISO9001 and ISO/IEC27001 together; or e) integrate existing management systems based on ISO/IEC20000-1 , ISO9001 and ISO/IEC27001 . In practice, an SMS, QMS or ISMS can also be integrated with other management system standards (MSS), such as ISO22301 or ISO55001.Clause4 provides an introduction to ISO/IEC20000-1, the HLS of MSS specified in ISO/IEC Directives Part 1 and considerations for the integration of an MSS.Clause5 provides an introduction to ISO9001, commonalities and differences with ISO/IEC20000-1 and considerations for the integration of an SMS with a QMS.Clause6 provides an introduction to ISO/IEC27001, commonalities and differences with ISO/IEC20000-1 and considerations for the integration of an SMS with an ISMS.Clause7 looks at considerations for the integration of an SMS, a QMS, and an ISMS.This document also provides correlation information for the terms and definitions of ISO/IEC20000-1 with ISO9001 and ISO/IEC27001 in AnnexA. Correlation of the clauses of ISO/IEC20000-1 with ISO9001 is shown in AnnexB. Correlation of the clauses of ISO/IEC20000-1 with ISO/IEC27001 is shown in AnnexC.