ISO/IEC JTC 1/SC 40
Standards
ISO/IEC JTC 1/SC 40 currently has 11 published standards, as well as various other standards or technical reports under development within the field of IT service-management and IT governance.

ISO/IEC JTC 1/SC 40

Section Title: Standards
Table Section Text: ISO/IEC JTC 1/SC 40 currently has 11 published standards, as well as various other standards or technical reports under development within the field of IT service-management and IT governance.

ISO/IEC Standard	Title	Status	Description

ISO/IEC 20000-1	Information technology – Service management – Part 1: Service management system requirements	Published (2011)	Specifies the requirements for the service provider to plan, establish, implement, operate, monitor, review, maintain, and improve a service management system (SMS)

ISO/IEC 20000-2	Information technology – Service management – Part 2: Guidance on the application of service management systems	Published (2012)	Provides guidance on the application of SMS based on the requirements of ISO/IEC 20000-1

ISO/IEC 20000-3	Information technology – Service management – Part 3: Guidance on scope definition and applicability of ISO/IEC 20000-1	Published (2012)	Provides guidance on scope definition, applicability and demonstration of conformity to the requirements in ISO/IEC 20000-1. Guidance on the different types of conformity assessment and assessment standards is included.

ISO/IEC TR 20000-4	Information technology – Service management – Part 4: Process reference model	Published (2010)	The purpose of ISO/IEC TR 20000-4:2010 is to facilitate the development of a process assessment model according to ISO/IEC 15504 process assessment principles.

ISO/IEC TR 20000-5	Information technology – Service management – Part 5: Exemplar implementation plan for ISO/IEC 20000-1	Published (2013)	Provides guidance on how to implement an SMS to fulfill the requirements of ISO/IEC 20000-1

ISO/IEC 20000-6	Information Technology -- Service Management -- Part 6: Requirements for bodies providing audit and certification of service management systems	Under Development	Part 6: Requirements for bodies providing audit and certification of service management systems

ISO/IEC 20000-8	Information technology -- Service management -- Part 8: Guidance on the application of service management systems for smaller organizations	Under Development	Part 8: Guidance on the application of service management systems for smaller organizations

ISO/IEC TR 20000-9	Information technology – Service management – Part 9: Guidance on the application of ISO/IEC 20000-1 to cloud services	Published (2015)	Provides guidance on the use of ISO/IEC 20000‑1:2011 for service providers delivering cloud services

ISO/IEC TR 20000-10	Information technology – Service management – Part 10: Concepts and terminology	Published (2013)	Provides an overview of the concepts and terminology of ISO/IEC 20000 and establishes a common framework for helping organizations understand the purpose of the parts of ISO/IEC 20000 and the relationships between the parts

ISO/IEC TR 20000-11	Information technology -- Service management -- Part 11: Guidance on the relationship between ISO/IEC 20000-1:2011 and service management frameworks	Under Development	Part 11: Guidance on the relationship between ISO/IEC 20000-1:2011 and service management frameworks

ISO/IEC TR 20000-12	Information technology -- IT Service management -- Part 12: Guidance on the relationship between ISO/IEC 20000-1:2011 and service management frameworks: CMMI-SVC	Under Development	Part 12: Guidance on the relationship between ISO/IEC 20000-1:2011 and service management frameworks: CMMI-SVC

ISO/IEC 30105-1	IT Enabled Services / Business Process Outsourcing Lifecycle Processes ITESBPO Standard	Published (2016)	Part 1: Process Reference Model (PRM)

ISO/IEC 30105-2	IT Enabled Services / Business Process Outsourcing Lifecycle Processes ITESBPO Standard	Published (2016)	Part 2: Process Assessment Model

ISO/IEC 30105-3	IT Enabled Services / Business Process Outsourcing Lifecycle Processes ITESBPO Standard	Published (2016)	Part 3: Process measurement framework and organization maturity model

ISO/IEC 30105-4	IT Enabled Services / Business Process Outsourcing Lifecycle Processes ITESBPO Standard	Published (2016)	Part 4: Terms and concepts

ISO/IEC 30105-5	IT Enabled Services / Business Process Outsourcing Lifecycle Processes ITESBPO Standard	Published (2016)	Part 5: Guidelines

ISO/IEC 30121	System and software engineering – Information technology – Governance of digital forensic risk framework	Published (2015)	Provides a framework for governing bodies of organizations on the best way to prepare an organization for digital investigations, before they occur

ISO/IEC 38500	Information Technology – governance of IT – For the Organization	Published (2015)	Provides guiding principles for members of governing bodies of organizations on the effective, efficient, and acceptable use of information technology (IT) within their organizations

ISO/IEC TS 38501	Information Technology – Corporate Governance of IT Implementation Guide	Published (2015)	Provides guidance on how to implement arrangements for effective governance of IT within an organization

ISO/IEC TR 38502	Information technology – Governance of IT – Framework and model	Published (2014)	provides guidance on the nature and mechanisms of governance and management together with the relationships between them, in the context of IT within an organization

ISO/IEC 38505-1	Information Technology -- Governance of IT -- Part 1: The application of ISO/IEC 38500 to the governance of data	Under Development	Part 1: The application of ISO/IEC 38500 to the governance of data

ISO/IEC TR 38503	Information technology -- governance of IT -- Guidance on the audit of the governance of IT	Under Development

ISO/IEC TR 38504	Information technology -- The structure of principles-based standards in the governance of IT	Under Development

Sentence(s)

The work will cover operational aspects of Governance of IT, including ISO/IEC 30121 Information Technology — Governance of digital forensic risk framework.

final_sentence: The work will cover operational aspects of Governance of IT, including ISO/IEC 30121 Information Technology — Governance of digital forensic risk framework.