Which one first: ISO 20000 or ISO9001?

[StefanK]

Hi everybody,

my company (IT) wants to get ISO 20000 and ISO 9001 certified. What should be implemented first? We have no pressure regarding a special timeframe.

Thanks a lot for your help!

Stefan

[johnb]

It seems odd to me that you'd want to certify to both. If your business is related primarily to IT Service Managment then 20000 is more or less the same as a 9001 system designed for your type of company. Not exactly, but 9001 works best for manufacturing and the like. If ITSM only relates to part of what you do then implementing 20000 seems a bit extreme.

If external requirements really do add up to you needing to implement both then you should probably implement a simple 9001 system geared toward fulfilling 20000 requirements first. Make sure processes like incident management and whatever else overlaps and fits well are included. If none of the 13 core processes in 20000 already relate to what you do then 20000 is definitely not for you.

If it's just management's dream to implement lots of ISO (yikes!) and your company is in ITSM then you should be looking towards implementing 20000 and 27001 or BS 25999 together instead (adding a separate Information Security or Business Continuity certification in addition to the brief requirements of 20000). Good luck.