Doc.

No :
INTEGRATED MANAGEMENT SYSTEM MANUAL
Rev. No :

Rev. Date :
Correspondence between ISO 9001:2008, ISO/IEC
27001:2005 & ISO/IEC 20000-1:2005 Pages of 2

ISO 9001:2008 Cl.No. ISO/IEC 27001:2005 Cl.No. ISO/IEC 20000-1:2005 Cl.No.

Information security
Quality Management System (title only) 4 4 Requirement for a Management System 3
management system

General Requirements 4.1 General requirements 4.1

Establishing and managing the

4.2 Planning and Implementing Service Management 4
ISMS

Establish the ISMS 4.2.1 Planning and Implementing Service Management 4

Implement and operate the

4.2.2 Planning and Implementing Service Management 4
ISMS

Documentation requirements (title only) 4.2 Documentation Requirements 4.3 Documentation Requirements 3.2

(Documentation requirements) General 4.2.1 General 4.3.1 Documentation Requirements 3.2

Quality Manual 4.2.2

Control of Documents 4.2.3 Control of Documents 4.3.2

Control of Records 4.2.4 Control of Records 4.3.3

Management Responsibility (title only) 5 Management Responsibility 5 Management Responsibility 3.1

Management Commitment 5.1

Customer Focus 5.2

Quality Policy 5.3 Management Commitment 5.1 Policy 4.4.1

Planning (title only) 5.4

Quality Objectives 5.4.1

Quality Management System Planning 5.4.2

Responsibility, Authority and

5.5
Communication (title only)

Responsibility and Authority 5.5.1

Management Representative 5.5.2

Internal Communication 5.5.3

Management Review (title only) 5.6 Management Review of the ISMS 7 Monitoring, measuring and reviewing 4.3

General 5.6.1 General 7.1

Review Input 5.6.2 Review Input 7.2

Review Output 5.6.3 Review Output 7.3

Resource Mangement (title only) 6 Resource Management 5.2

Provision Of Resources 6.1 Budgeting and Accounting for IT Services 6.4

Provision of Resources 5.2.1
Human Resources (title only) 6.2

General 6.2.1
Training, Awareness and Competence 5.2.2 Competency, awareness and Training 3.3
Competence, Awareness And Training 6.2.2

Service Continuity and Availability Management 6.3

Infrastructure 6.3 Capacity Management 6.5

Information Security Management 6.6

Work Environment 6.4

 Doc.No :
INTEGRATED MANAGEMENT SYSTEM MANUAL
Rev. No :

Rev. Date :
Correspondence between ISO 9001:2008, ISO/IEC
27001:2005 & ISO/IEC 20000-1:2005 Pages of 2

Product Relization (title only) 7 Planning and Implementing Service Management 4

Plan and Service Management 4.1

Planning Of Product Realization 7.1
Planning and Implementing New or Changed Services 5

Customer -Related Processes (title only) 7.2

Determination Of Requirements Related To

7.2.1
The Product
Review Of Requirements Related to the
7.2.2
Product

Customer Communication 7.2.3 Business Relationship Management 7.2

Design abd development (title only) 7.3

Design abd development Planning 7.3.1

Design abd development Input 7.3.2

Design abd development Outputs 7.3.3

Design abd development Review 7.3.4

Design abd development Verification 7.3.5

Design abd development Validation 7.3.6

Control of Design abd development Changes 7.3.7 Change Management 9.2

Purchasing (title only) 7.4

Purchasing Process 7.4.1 Supplier Management 7.3

Purchasing Information 7.4.2

Verification of Purchased Product 7.4.3

Production and Service Provision (title

7.5
only)

Implement Service Management and Provide Services 4.2

7.5.1 Service Level Management 6.1

Control of Production and Services
Service Reporting 6.2

Release Management Process 10.1

Validation of Processes for Production and

7.5.2
Service Provision

Identification And Traceability 7.5.3 Configuration Management 9.1

Customer Property 7.5.4

Preservation of Product 7.5.5

Control Of Monitoring and Measuring Devices 7.6

Measurement, Analysis and Improvement

8
(title only)

General 8.1

Monitoring and Measurement (title only) 8.2

Customer Satisfaction 8.2.1

Internal Audit 8.2.2 Internal ISMS Audit 6

Monitoring, Measuring, and Reviewing 4.3
Monitoring and Measurement Of Processes 8.2.3 Monitor and Review the ISMS 4.2.3

Monitoring and Measurement Of Product 8.2.4 Monitor and Review the ISMS 4.2.3

Monitor and Improve the ISMS 4.2.4

Control of Nonconforming Product 8.3 Incident Management 8.2

 Doc.No :
INTEGRATED MANAGEMENT SYSTEM MANUAL
Rev. No :

Rev. Date :
Correspondence between ISO 9001:2008, ISO/IEC
27001:2005 & ISO/IEC 20000-1:2005 Pages of 2

Analysis of Data 8.4

Improvement (title only) 8.5 ISMS Improvement 8

Continual Improvement 8.5.1 Continual Improvement 8.1 Continual Improvement 4.4

Corrective Action 8.5.2 Corrective Action 8.2 Problem Management 8.3

Preventive Action 8.5.3 Preventive Action 8.3 Problem Management 8.3