SA/SNZ TR ISO/IEC :2014

Similar documents
AS/NZS ISO/IEC 17067:2015

AS/NZS ISO/IEC 25030:2013

AS/NZS ISO 19157:2015

AS/NZS ISO 13008:2014

Australian/New Zealand Standard

AS/NZS ISO/IEC/IEEE :2015

AS/NZS ISO/IEC/IEEE 42010:2013

Australian/New Zealand Standard

Australian/New Zealand Standard

Australian/New Zealand Standard

Australian/New Zealand Standard

Miscellaneous Publication

Australian Standard. Information and documentation Records management processes Metadata for records. Part 1: Principles

SA/SNZ TR :2016

Information and documentation Records management. Part 1: Concepts and principles AS ISO :2017 ISO :2016

A S ISO Records Management Part 1: General

Australian Standard. Records Management. Part 1: General AS ISO ISO

Australian Standard. Records Management. Part 2: Guidelines AS ISO ISO TR

Australian Standard. Industrial automation systems and integration Open systems application integration framework

Australian Standard. Industrial automation systems and integration Open systems application integration framework

Australian Standard. General requirements for the competence of testing and calibration laboratories AS ISO/IEC ISO/IEC 17025:1999

AS/NZS 3080:2003 AS/NZS

CORPORATE GOVERNANCE OF INFORMATION & COMMUNICATION TECHNOLOGY

Information technology Service management. Part 11: Guidance on the relationship between ISO/IEC :2011 and service management frameworks: ITIL

Information technology Guidelines for the application of ISO 9001:2008 to IT service management and its integration with ISO/IEC :2011

Australian/New Zealand Standard

Information technology Security techniques Guidance on the integrated implementation of ISO/IEC and ISO/IEC

ISO/IEC INTERNATIONAL STANDARD

ISO/IEC INTERNATIONAL STANDARD. Information technology Security techniques Information security management system implementation guidance

INTERNATIONAL STANDARD

ISO/IEC/ IEEE Systems and software engineering Content of life-cycle information items (documentation)

INTERNATIONAL STANDARD

Information technology Process assessment Concepts and terminology

ISO/IEC Systems and software engineering Systems and software Quality Requirements and Evaluation (SQuaRE) Planning and management

This document is a preview generated by EVS

Guide 28 General rules for a model third-party certification system for products

Information technology Service management. Part 10: Concepts and vocabulary

Information technology Process assessment Process measurement framework for assessment of process capability

ISO/IEC INTERNATIONAL STANDARD. Information technology Security techniques Information security risk management

Information technology Security techniques Sector-specific application of ISO/IEC Requirements

ISO/IEC INTERNATIONAL STANDARD. Software engineering Software measurement process. Ingénierie du logiciel Méthode de mesure des logiciels

ISO/IEC INTERNATIONAL STANDARD

Software engineering Guidelines for the application of ISO 9001:2008 to computer software

This document is a preview generated by EVS

ISO/IEC INTERNATIONAL STANDARD. Information technology Security techniques Information security incident management

ISO/IEC INTERNATIONAL STANDARD. Software engineering Product evaluation Part 3: Process for developers

ISO/IEC TS Conformity assessment Guidelines for determining the duration of management system certification audits

ISO/IEC INTERNATIONAL STANDARD

ISO/IEC INTERNATIONAL STANDARD. Information technology Keyboard layouts for text and office systems Part 2: Alphanumeric section

ISO/IEC INTERNATIONAL STANDARD

ISO/IEC TR TECHNICAL REPORT. Information technology Security techniques Information security management guidelines for financial services

ISO/IEC INTERNATIONAL STANDARD. Information technology Guideline for the evaluation and selection of CASE tools

ISO/IEC Information technology Security techniques Network security. Part 5:

ISO/IEC INTERNATIONAL STANDARD. Information technology Systems and software engineering FiSMA 1.1 functional size measurement method

Australian Standard. Information technology Communication interface connectors used in local area networks AS ISO/IEC/TR 9578:1990

Information technology IT asset management Overview and vocabulary

This is a free 10 page sample. Access the full version online.

This document is a preview generated by EVS

Information technology Security techniques Requirements for bodies providing audit and certification of information security management systems

ISO/IEC INTERNATIONAL STANDARD. Information technology Security techniques Information security risk management

ISO/IEC TR TECHNICAL REPORT

ISO/IEC/ IEEE INTERNATIONAL STANDARD. Systems and software engineering Requirements for acquirers and suppliers of user documentation

This document is a preview generated by EVS

ISO/IEC Conformity assessment Fundamentals of product certification and guidelines for product certification schemes

This document is a preview generated by EVS

ISO/IEC INTERNATIONAL STANDARD. Information technology Security techniques Entity authentication assurance framework

This document is a preview generated by EVS

ISO/IEC INTERNATIONAL STANDARD. Conformity assessment Supplier's declaration of conformity Part 1: General requirements

ISO/IEC First edition Reference number ISO/IEC 20005:2013(E) ISO/IEC 2013

ISO/IEC INTERNATIONAL STANDARD

ISO/IEC INTERNATIONAL STANDARD. Information technology Mobile item identification and management Mobile AIDC application programming interface

ISO 2146 INTERNATIONAL STANDARD. Information and documentation Registry services for libraries and related organizations

Information technology Security techniques Mapping the revised editions of ISO/IEC and ISO/IEC 27002

ISO/IEC INTERNATIONAL STANDARD

ISO/IEC TR TECHNICAL REPORT

ISO/IEC TR TECHNICAL REPORT. Software engineering Guide for the application of ISO/IEC to project management

This document is a preview generated by EVS

ISO/IEC INTERNATIONAL STANDARD. Information technology EAN/UCC Application Identifiers and Fact Data Identifiers and Maintenance

This is a preview - click here to buy the full publication TECHNICAL REPORT

ISO/IEC INTERNATIONAL STANDARD. Conformity assessment Requirements for bodies certifying products, processes and services

Conformity assessment Requirements for bodies providing audit and certification of management systems. Part 6:

ISO/IEC INTERNATIONAL STANDARD. Information technology Security techniques Hash-functions Part 2: Hash-functions using an n-bit block cipher

Information technology Service management. Part 10: Concepts and terminology

INTERNATIONAL STANDARD

ISO/IEC INTERNATIONAL STANDARD. Information technology MPEG extensible middleware (MXM) Part 3: MXM reference software

ISO/IEC Software Engineering Lifecycle profiles for Very Small Entities (VSEs) Part 2-1: Framework and taxonomy

ISO/IEC INTERNATIONAL STANDARD. Information technology Software asset management Part 2: Software identification tag

ISO/IEC INTERNATIONAL STANDARD

This document is a preview generated by EVS

ISO/IEC 1001 INTERNATIONAL STANDARD. Information technology File structure and labelling of magnetic tapes for information interchange

Framework for building information modelling (BIM) guidance

ISO/IEC TR TECHNICAL REPORT

ISO/IEC INTERNATIONAL STANDARD. Information technology Multimedia framework (MPEG-21) Part 21: Media Contract Ontology

This document is a preview generated by EVS

Transcription:

(ISO/IEC TR 20000-5:2013, IDT) Australian/New Zealand Technical Report Information technology Service management Part 5: Exemplar implementation plan for ISO/IEC 20000-1 SA/SNZ TR ISO/IEC 20000.5:2014

This joint Australian/New Zealand Technical Report was prepared by joint Technical Committee IT-030, ICT Governance and Management. It was approved on behalf of the Council of Standards Australia on 3 August 2014 and on behalf of the Council of Standards New Zealand on 1 August 2014. This Techncial Report was published on 22 August 2014. The following are represented on Committee IT-030: Australian Computer Society Australian Industry Group Australian Information Industry Association Australian Institute of Company Directors Australian Taxation Office Consumers Federation of Australia Council of Small Business Organisations of Australia Department of Finance Governance Institute of Australia Information Systems, Audit and Control Association ISACA Wellington Chapter National ICT Australia New Zealand Computer Society Project Management Institute State Government of Victoria IT Service Management Forum (Australia) Web Science Australia Women on Boards Keeping standards up to date Standards are living documents which reflect progress in science, technology, and systems. To maintain their currency, all standards are periodically reviewed, and new editions are published. Between editions, amendments may be issued. Standards may also be withdrawn. It is important that readers assure themselves they are using a current standard, which should include any amendments which may have been published since the standard was purchased. Detailed information about joint Australian/New Zealand standards can be found by visiting the standards webshop in Australia at www.saiglobal.com.au or Standards New Zealand s website at www.standards.co.nz. Alternatively, Standards Australia publishes an annual printed catalogue with full details of all current standards. For more frequent listings or notification of revisions, amendments, and withdrawals, Standards Australia and Standards New Zealand offer a number of update options. For information about these services, users should contact their respective national standards organisation. We also welcome suggestions for improvement in our standards, and especially encourage readers to notify us immediately of any apparent inaccuracies or ambiguities. Please address your comments to the Chief Executive of either Standards Australia or Standards New Zealand at the address shown on the title page. This Technical Report was issued in draft form for comment as DR SA/SNZ TR ISO/IEC 20000.5:2014.

(ISO/IEC TR 20000-5:2013, IDT) Australian/New Zealand Technical Report Information technology Service management Part 5: Exemplar implementation plan for ISO/IEC 20000-1 First published as SA/SNZ TR ISO/IEC 20000.5:2014. COPYRIGHT Standards Australia Limited/Standards New Zealand All rights are reserved. No part of this work may be reproduced or copied in any form or by any means, electronic or mechanical, including photocopying, without the written permission of the publisher, unless otherwise permitted under the Copyright Act 1968 (Australia) or the Copyright Act 1994 (New Zealand). Jointly published by SAI Global Limited under licence from Standards Australia Limited, GPO Box 476, Sydney, NSW 2001 and by Standards New Zealand, Private Bag 2439, Wellington 6140. ISBN (Print) 978-1-77551-503-6 ISBN (PDF) 978-1-77551-504-3

ii PREFACE This Technical Report was prepared by the Joint Standards Australia/Standards New Zealand Committee IT-030, ICT Governance and Management. This Technical Report is identical with, and has been reproduced from ISO/IEC TR 20000-5:2013, Information technology Service management, Part 5: Exemplar implementation plan for ISO/IEC 20000-1. The objective of this Technical Report is to provide standardization in the field of service management. SA/SNZ TR ISO/IEC 20000.5 is an exemplar implementation plan providing guidance on how to implement a service management system (SMS) to fulfil the requirements of AS ISO/IEC 20000.1. The intended users of SA/SNZ TR ISO/IEC 20000.5 are service providers, but it can also be useful for those advising service providers on how to implement an SMS. SA/SNZ TR ISO/IEC 20000.5 includes advice for service providers on a suitable order in which to plan, implement and improve an SMS using as an example a generic three phased approach to manage the implementation. The service provider can choose their own sequence to implement the SMS. Also included is advice on the development of a business case, the project initiation and other activities that are recommended for the implementation to be successful. References to International Standards should be replaced by references to Australian or Australian/New Zealand Standards, as follows: Reference to International Standard Australian/New Zealand Standard ISO/IEC 20000 Information technology Service management 20000-1 Part 1: Service management system requirements AS ISO/IEC 20000 Information technology Service management 20000.1 Part 1: Service management system requirements The term informative has been used in this Technical Report to define the application of the annex to which it applies. An informative annex is only for information and guidance. The Australian representatives of IT-030 participated in the ISO/IEC JTC 1 working group that produced ISO/IEC 20000-5:2013 and its predecessor, ISO/IEC TR 20000-5:2010.

ISO/IEC TR 20000-5:2013(E) SA/SNZ TR ISO/IEC 20000.5:2014 Contents iii Page CONTENTS Foreword...iv Introduction v 1 Scope... 1 2 Normative references... 1 3 Terms and definitions... 1 4 Benefits of a phased approach... 1 5 Approach... 2 5.1 Overview... 2 5.2 Key considerations... 3 5.3 Understanding ISO/IEC 20000-1:2011... 3 5.4 Scope and applicability... 3 5.5 Changes to scope... 3 5.6 Project support and commitment... 4 5.7 Gap analysis... 4 5.8 Developing the business case... 5 5.9 Implementation... 6 5.10 Project readiness... 6 5.11 Project team... 7 6 Overview of implementation phases... 7 7 Taxonomy of each phase... 9 7.1 Summary of activities in each phase... 9 7.2 Key characteristics and activities of each phase... 9 8 Post-implementation...12 8.1 Control of the SMS and improving service...12 8.2 Plan-Do-Check-Act...12 8.3 Interfaces to projects for new and changed services...13 Annex A (informative) Project initiation and business case development...14 Annex B (informative) Three phases of the implementation project...16 Annex C (informative) Developing policies...22 Annex D (informative) Documentation management...25 Annex E (informative) Templates...28 Bibliography...41 ISO/IEC 2013 All rights reserved iii

iv ISO/IEC TR 20000-5:2013(E) Introduction INTRODUCTION ISO/IEC 20000-1:2011 specifies the requirements for a service management system (SMS) to design, transition, deliver, manage and improve services. ISO/IEC 20000-1:2011 can be used by organizations of all sizes, sectors, types and many different organizational structures or business models. This part of ISO/IEC 20000 is an exemplar implementation plan providing guidance on how to implement an SMS to fulfil the requirements specified in ISO/IEC 20000-1:2011. The intended users of this part of ISO/IEC 20000 are service providers, but it can also be useful for those advising service providers on how to implement an SMS. This part of ISO/IEC 20000 includes advice for service providers on a suitable order in which to plan, implement and improve an SMS using, as an example, a generic three-phased approach to manage the implementation. The service provider may choose their own sequence to implement the SMS. Also included is advice on the development of a business case, the project initiation and other activities that are recommended for the implementation to be successful. The phases described in this part of ISO/IEC 20000 do not include changes to the intended scope of the service provider s SMS. The scope itself is not subject to phased changes as a result of adopting the advice in this part of ISO/IEC 20000. Instead, each phase should improve the SMS in alignment with the service provider s agreed scope, building on the results of the previous phase. The main activities for the development of the business case and initiation of the implementation project are shown in Annex A. A list of the main activities to implement the SMS based on the requirements specified in ISO/IEC 20000-1:2011, in three phases, is shown in Annex B. Many of the activities described in this part of ISO/IEC 20000 are intended to be met by actions over more than one phase, with each phase building upon the achievements of the earlier phase. Once the final phase is completed, the service provider s organization can achieve the benefits of an SMS that fulfils the requirements specified in ISO/IEC 20000-1:2011. Supporting information for the implementation project is also provided. Annex C provides examples of policies to illustrate what a service provider can want to put in place. Because policies depend on the organization and the strategy of the service provider, these example policies can be tailored to suit the organizational requirement. Annex D provides guidance on documentation management. Annex E includes templates for some of the documents specified in ISO/IEC 20000-1:2011 that can be amended to suit individual circumstances. ISO/IEC 2013 All rights reserved v

1 ISO/IEC TR 20000-5:2013(E) TECHNICAL REPORT Information technology Service management Information technology Service management Part 5: Exemplar implementation plan for ISO/IEC 20000-1 Exemplar implementation plan for ISO/IEC 20000-1 1 Scope This part of ISO/IEC 20000 provides guidance for an approach to implement an SMS that can fulfil the requirements specified in ISO/IEC 20000-1:2011. This part of ISO/IEC 20000 illustrates a generic, threephased plan to manage implementation activities, taking into consideration the design, transition, delivery, management and improvement of services. The service provider can tailor the phases to suit its needs and constraints. This part of ISO/IEC 20000 can be used together with the other parts of ISO/IEC 20000. 2 Normative references The following documents, in whole or in part, are normatively referenced in this document and are indispensable for its application. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies. ISO/IEC 20000-1:2011, Information technology Service management Part 1: Service management system requirements 3 Terms and definitions For the purposes of this document, the terms and definitions given in ISO/IEC 20000-1:2011 apply. 4 Benefits of a phased approach Although the demonstration of conformity to ISO/IEC 20000-1:2011 is only possible once all the requirements of the standard are fulfilled, there can be many reasons to opt for a phased approach to implementation. The phases are based on identification of a suitable sequence of improvements, each designed to assist in fulfilling one or more of the requirements specified in ISO/IEC 20000-1:2011. This can allow better and more efficient risk management than attempting to make all the improvements and necessary changes in a single phase. A phased approach can allow costs to be incurred over a longer period of time. This can make it easier to fund the SMS implementation using operational budget instead of capital budget. It can also generate benefits earlier, encouraging management commitment and funding of later phases. Additional benefits can include: a) allowing the service provider to gain experience with a smaller set of implementation activities, rather than attempting everything in one big phase; b) explaining each phase in a way that can be understood easily by all parties involved in or affected by the changes; c) planning the phased use of resources that can be scarce, expensive or already committed to other projects; d) allowing lessons learnt to be used in later phases of implementation; 1 COPYRIGHT

Information technology - Service management - Part 5: Exemplar implementation plan for ISO/IEC 20000-1 This is a free sample only. Purchase the full publication here: https://shop.standards.govt.nz//catalog/20000.5%3a2014%28sa%7csnz+tr+iso%7ciec%29/vie w Or contact Standards New Zealand using one of the following methods. Freephone: 0800 782 632 (New Zealand) Phone: +64 3 943 4259 Email: enquiries@standards.govt.nz