Course Overview
The ISO/IEC 20000-1:2018 (ITSMS) Lead Auditor Training programme is delivered by MEGADEMİ, an Exemplar Global Certified Training Provider, for professionals who need practical, evidence-based competence in ISO/IEC 20000-1 and in technology governance & assurance. The curriculum is developed and taught by practising auditors, implementers and consultants working across manufacturing, services, technology, healthcare, energy, public sector and supply chains. Delivery combines instructor-led teaching, facilitated discussion, scenario work, document-review exercises, written assignments and a supervised assessment. Participants work through the purpose and intent of ISO/IEC 20000-1, requirement by requirement, and then into structured workshops that mirror real audit engagements — internal audits, second-party audits and, where relevant, third-party certification audits. On successful completion candidates receive a MEGADEMİ course completion certificate. A course certificate and personnel certification are two separate things: personnel certification is applied for directly to a personnel certification body such as Exemplar Global, whose auditor categories set their own training, examination and audit-experience requirements.
Learning Objectives
- Explain the purpose, scope, structure and evolution of ISO/IEC 20000-1
- Interpret each requirement of ISO/IEC 20000-1 and translate requirements into operational controls and measurable objectives
- Apply Annex SL (the harmonized structure), risk-based thinking, the process approach and the Plan-Do-Check-Act cycle
- Plan, prepare, lead and report lead auditor activities in alignment with ISO 19011:2026 and, where applicable, ISO/IEC 17021-1
- Design audit programmes and individual audit plans that are risk-prioritised and resource-balanced
- Gather sufficient and appropriate objective evidence using observation, interviewing, sampling and document review
- Write clear, factual, defensible nonconformities tied to specific requirements and evidence
- Evaluate the effectiveness of corrective action, root cause analysis and continual improvement
- Manage auditor behaviour, ethics, confidentiality and conflict-of-interest situations professionally
- Communicate findings to executive leadership and drive measurable performance improvement
Course Modules
Module 1 — Context, governance and the business case for ISO/IEC 20000-1+
- •History, ownership and revision cycle of ISO/IEC 20000-1
- •Strategic value of certification for technology governance & assurance
- •Stakeholder map: top management, customers, regulators, certification bodies
- •Linking the standard to organisational strategy, ESG and risk appetite
Module 2 — Terms, definitions and the Annex SL harmonized structure+
- •Common vocabulary: conformity, nonconformity, opportunity, risk, evidence
- •Annex SL ten-clause architecture and cross-standard integration
- •Process approach, risk-based thinking and PDCA in practice
Module 3 — Requirements of ISO/IEC 20000-1, section by section+
- •Context, leadership and planning (clauses 4–6)
- •Support, operation, performance evaluation and improvement (clauses 7–10)
- •Sector-specific interpretations and common implementation pitfalls
- •Documented information: what is mandatory, what is pragmatic
Module 4 — Risk, opportunities and controls in technology governance & assurance+
- •Risk identification, analysis and evaluation aligned with ISO 31000
- •Designing proportionate controls and key performance indicators
- •Integration with operational, financial and reputational risk registers
Module 5 — Audit programme and individual audit planning+
- •Building an annual third-party audit programme
- •Audit objectives, scope, criteria and resource allocation
- •Stage 1 readiness review vs. Stage 2 certification audit (per ISO/IEC 17021-1)
- •Sampling methodology, remote auditing and travel logistics
Module 6 — Conducting the audit: evidence, interviewing and observation+
- •Opening meeting protocol and stakeholder management
- •Open questions, layered questioning and active listening techniques
- •Tracing processes end-to-end (vertical and horizontal trace audits)
- •Evaluating documented information vs. operational reality
Module 7 — Findings, classification and reporting+
- •Writing factual, complete, defensible findings (the "5C" rule)
- •Major vs. minor nonconformity, observation and opportunity for improvement
- •Audit report structure, closing meeting and post-audit communication
Module 8 — Corrective action, root cause analysis and follow-up+
- •Containment, correction and corrective action — the critical distinction
- •RCA techniques: 5 Whys, fishbone, fault tree, Apollo, Bowtie
- •Verification of effectiveness and lessons-learned loops
Module 9 — Auditor competence, behaviour and ethics+
- •ISO 19011:2026 personal behaviour and competence framework
- •Confidentiality, impartiality, independence and conflict of interest
- •Handling difficult auditees, disagreements and cultural difference
Module 10 — Examination, certification routes and continual development+
- •Mock audit exercise: full simulated third-party engagement
- •Written examination preparation and exam technique
- •How personnel certification works: schemes such as Exemplar Global, their requirements and CPD
- •Building a career portfolio: audit log, witnessed audits, sector specialisation
Daily Programme
Day 1
Foundations of ISO/IEC 20000-1 and the audit discipline- 08:30 Welcome, learner contract, expectations and pre-assessment
- 09:00 History, governance and business value of ISO/IEC 20000-1
- 10:30 Terms, definitions and Annex SL and the process approach
- 12:30 Lunch & networking
- 13:30 Clause walk-through — Context, Leadership, Planning
- 15:30 Workshop: stakeholder mapping and scope statement
- 17:00 Day-1 reflection and pre-read for day 2
Day 2
Deep dive into the content of ISO/IEC 20000-1- 08:30 Recap quiz and review
- 09:00 Support, Operation (clauses 7–8) — controls and documented information
- 10:30 Performance Evaluation (clause 9) — monitoring, internal audit, management review
- 12:30 Lunch
- 13:30 Improvement (clause 10) — nonconformity and corrective action
- 15:00 Workshop: building a risk-based control matrix
- 17:00 Daily reflection log
Day 3
Audit programme, planning and preparation- 08:30 Recap and clarifications
- 09:00 ISO 19011:2026 — managing an third-party audit programme
- 10:30 Audit plan, checklist design and sampling strategy
- 12:30 Lunch
- 13:30 Role-play: opening meeting and stakeholder communication
- 15:00 Workshop: building an audit checklist for a real process
- 17:00 Preparation for tomorrow's full simulation
Day 4
Full audit simulation — evidence, findings and reporting- 08:30 Briefing for the simulated audit
- 09:00 Simulated audit — opening meeting, interviews, document review, observation
- 12:30 Working lunch
- 13:30 Drafting findings (5C rule) and the audit report
- 15:30 Closing meeting role-play and feedback
- 17:00 Debrief and personal development plan
Day 5
Corrective action, ethics, examination- 08:30 Root cause analysis workshop (5 Whys, fishbone, Bowtie)
- 10:00 Auditor behaviour, ethics and conflict of interest
- 12:30 Lunch
- 13:30 Final written examination (invigilated, closed-book where required)
- 16:00 Personalised feedback, personnel certification routes and graduation
Prerequisites
- Working knowledge of management systems and the relevant standard (a pre-course primer is provided)
- Familiarity with the PDCA cycle and the process approach
- Professional written and spoken English at B2 level or higher
- Two or more years of experience in a quality, EHS, IT, compliance or operations function is recommended
Who Should Attend
- Lead Auditors, consultants and audit team members working with ISO/IEC 20000-1
- Quality, EHS, information security, sustainability, compliance and operations leaders
- Management representatives and process owners preparing for certification or recertification
- Professionals who need to satisfy the training requirement of a personnel certification scheme
- Suppliers and supply-chain managers required to demonstrate conformance to ISO/IEC 20000-1
Case Studies & Workshops
- ▸A multinational manufacturer integrating ISO/IEC 20000-1 across 14 plants on four continents — scope, harmonisation and certification strategy.
- ▸A regulated service provider responding to a major nonconformity raised during a surveillance audit — root cause, corrective action and retention of certification.
- ▸A fast-growing SME using ISO/IEC 20000-1 as a commercial differentiator to win enterprise tenders in technology governance & assurance.
- ▸A public-sector body using the standard to demonstrate accountability and resilience to citizens and oversight bodies.
Assessment & Examination
Daily knowledge checks, workshop participation, peer feedback and instructor observation across every module.
Invigilated written paper of two hours covering interpretation, planning, auditing and reporting — multiple-choice and scenario-based questions.
Full role-play assessment evaluating audit planning, evidence collection, finding-writing, closing meeting and report quality.
70% overall, with no individual section below 60%. One supervised re-sit is included in the course fee.
Certification
Successful candidates receive the ISO/IEC 20000-1:2018 (ITSMS) Lead Auditor Training course completion certificate issued by MEGADEMİ, an Exemplar Global Certified Training Provider. The certificate carries a unique verification number. It is a course completion certificate: it does not by itself make the holder a certified auditor. Personnel certification is applied for separately to a personnel certification body such as Exemplar Global, according to the requirements of the relevant auditor category. Digital credentials, a printable PDF and a verifiable badge are issued within five working days of successful completion. CPD logging guidance is provided.
Exemplar Global Certification Pathway
Certified Information Technology Service Management System Lead Auditor
Verifiable Digital BadgeGeneral Overview
Exemplar Global's ISO/IEC 20000-1 Lead Auditor certification program provides international recognition for professionals who audit or implement management systems based on ISO/IEC 20000-1. After completing this MEGADEMİ training, you can apply directly to Exemplar Global to demonstrate — through examination of knowledge and personal attributes — that you have the competence to perform globally accepted audits, with your certification listed on the Exemplar Global registry and issued as a verifiable digital badge.
Program Objectives
- ▸Help organisations select qualified ISO/IEC 20000-1 auditors and implementers.
- ▸Enhance the professional recognition of certified individuals worldwide.
- ▸Provide assurance that audits are accepted globally under ISO 17024 personnel certification rules.
5 Steps to Certification
- 1Register
Sign up on the Exemplar Community platform with your professional details.
- 2Login
From Manage My Certification → Exemplar Global, choose Apply for Certification.
- 3Select
Pick the certification scheme and grade you are eligible for.
- 4Submit
Upload your MEGADEMİ training certificate, supporting evidence and pay the application fee.
- 5Assess
Complete the Work Style Assessment for Auditors to validate behavioural competence.
Exemplar Global FAQ
How long is my training certificate valid?+
Exemplar Global recognises training completed with a certified training provider for 10 years from the date of completion for management system schemes (QMS, EMS, OHS, etc.). Some schemes require training within the last three years — when that window has lapsed you may complete a knowledge examination or submit an audit log showing 10 relevant audit days within the past three years.
Do you recognise certification from other bodies?+
Exemplar Global has reciprocal agreements with IRCA/CQI, PECB and the CCAA. Applicants holding a current certification with one of these bodies may qualify for direct recognition.
How do I check my application status?+
Log in to community.exemplarglobal.org → Manage My Certifications → Exemplar Global → Current Certifications → Applications in Progress to track your application in real time.
How long does processing take?+
Once all supporting documents are uploaded, applications are typically processed within seven to ten business days.
Where this course fits
The standard page lists every course for this standard; the training-level page compares course levels before you book. Whole teams are usually better served by in-house delivery.
References and official sources
Frequently Asked Questions
What kind of certificate does the ISO/IEC 20000-1:2018 (ITSMS) Lead Auditor Training course provide?+
MEGADEMİ is an Exemplar Global Certified Training Provider and issues a course completion certificate at the end of the programme. Provider certification covers our training system; personnel certification is a separate step, applied for directly to the personnel certification body.
What is the duration and delivery format?+
Standard duration is 5 days. We deliver live online (instructor-led, fully interactive), in classroom in major international cities, and as a blended programme. In-house corporate delivery is available globally in English, Turkish and on request in other languages.
Do I need prior experience with ISO/IEC 20000-1?+
Familiarity with management systems and the relevant standard is helpful but not mandatory. A pre-course primer, glossary and self-assessment quiz are provided so every participant starts from a shared baseline.
How is the course assessed?+
Assessment combines continuous evaluation, a full audit simulation and a final invigilated written examination. The pass mark is 70% overall, with one supervised re-sit included in the course fee.
What materials and post-course support are included?+
Participants receive a comprehensive course manual, all workshop templates, audit checklists, finding-writing guides, six months of post-course Q&A access with the lead trainer, and access to course updates when the underlying standard is revised.
Does this course make me a certified auditor?+
No. The course is designed to satisfy the training requirement of personnel certification schemes. To become a certified auditor you must meet the training, examination and audit-experience requirements of the relevant category and apply separately to a personnel certification body such as Exemplar Global.
Can MEGADEMİ deliver this programme in-house for our team?+
Absolutely. We deliver tailored in-house and corporate training globally, with content adapted to your sector, processes and audit programme. Volume discounts apply from six participants. Contact our corporate training team for a proposal.
Technically reviewed by Eren İŞMAN, Lead Auditor and technical reviewer, MEGADEMİ-EUROTECH LLC. Last technically reviewed .
