ITIL
A set of IT service-management practices for incident, change, problem, request, service-level and improvement processes. Implementation depends on maturity and is not equivalent to buying an ITSM tool.
ISO/IEC 20000-1:2018
A service-management system standard with verifiable requirements for planning, delivery and continuous improvement. Organisations may seek scoped certification.
NIST CSF 2.0
A cybersecurity risk framework structured by outcomes: Govern, Identify, Protect, Detect, Respond and Recover. NIST does not certify organisations against CSF.
Combining them pragmatically
Define incident workflows, change records, owners, metrics and risk controls. Prioritise evidence useful to the team over unused policy documents.
At a glance
| Framework | Focus |
|---|---|
| ITIL | Service management practices |
| ISO 20000-1 | Service-management requirements |
| NIST CSF | Cybersecurity risk outcomes |
How SFERE can support
SFERE: operational processes, KPIs and architectural controls; certification outside scope.
Official laws, standards & publisher resources
This is an editorial explanation. Verify consolidated laws, applicable standards and interpretations for your activity, country and date. Full standards may require a licence.