ISO 20000 vs EN 1090
ISO 20000
International standard for service management systems
EN 1090
EU standard for execution of steel and aluminium structures
Quick Verdict
ISO 20000 certifies voluntary service management systems for global providers, ensuring reliable ITSM via audits. EN 1090 mandates CE marking for EU structural steel/aluminium via FPC, guaranteeing safety. Companies adopt ISO 20000 for trust, EN 1090 for legal market access.
ISO 20000
ISO/IEC 20000-1:2018 Service management system requirements
Key Features
- Annex SL structure enables integrated management systems
- Full service lifecycle processes in Clause 8
- PDCA cycle mandates continual improvement
- Certifiable SMS demonstrates service reliability externally
- Flexible for ITIL, DevOps, Agile methodologies
EN 1090
EN 1090 Execution of steel and aluminium structures
Key Features
- Factory Production Control (FPC) certification
- Risk-based Execution Classes (EXC1-4)
- CE marking under CPR for market access
- Welding coordination per ISO 3834
- Material traceability and NDT inspection
Detailed Analysis
A comprehensive look at the specific requirements, scope, and impact of each standard.
ISO 20000 Details
What It Is
ISO/IEC 20000-1:2018 is the certifiable international standard for establishing and operating a service management system (SMS). It specifies auditable requirements for managing the full service lifecycle—planning, design, transition, delivery, and improvement—using a risk-based, PDCA (Plan-Do-Check-Act) approach aligned with Annex SL for integration with other ISO standards.
Key Components
- Clauses 4-10 cover context, leadership, planning, support, operation, performance evaluation, and improvement.
- Clause 8 details operational domains: service portfolio, relationships, supply/demand, design/transition, resolution/fulfilment, assurance.
- Core processes include incident/problem management, change/release, configuration/asset, availability/continuity, security.
- Built on management system principles; certifiable via accredited bodies with Stage 1/2 audits, surveillance.
Why Organizations Use It
- Drives service reliability, customer trust, risk reduction (e.g., 50% certificate growth per ISO survey).
- Enables market differentiation, procurement advantages, integration with ISO 9001/27001.
- Voluntary but supports regulatory compliance, operational efficiency (e.g., 69% report trust gains).
Implementation Overview
- Phased: gap analysis, design, deployment, audits (12-18 months typical).
- Applies to all sizes/industries providing services; requires leadership, evidence, continual improvement.
EN 1090 Details
What It Is
EN 1090 is a harmonized European standard family (EN 1090-1, -2, -3) under the Construction Products Regulation (CPR). It governs conformity assessment and execution of structural steel and aluminium components/kits for construction works. Primary purpose: ensure safe fabrication, assembly, and CE marking via risk-based Execution Classes (EXC1-4).
Key Components
- EN 1090-1: Factory Production Control (FPC), Declaration of Performance (DoP), AVCP systems with Notified Body certification.
- EN 1090-2/-3: Technical rules for materials, welding (ISO 3834 alignment), tolerances, corrosion protection, NDT inspection.
- Core principles: traceability, risk scaling, process control; no fixed control count, scales by EXC.
Why Organizations Use It
- Mandatory CE marking for EU/EEA market access; avoids legal penalties, market exclusion.
- Reduces liability, rework; builds trust via certified quality.
- Enables high-risk projects (EXC3/4), competitive bidding.
Implementation Overview
- Phased: gap analysis, FPC build, welding quals, NB certification, surveillance.
- Targets fabricators in construction; any size, EU-focused; requires ongoing audits.
Key Differences
| Aspect | ISO 20000 | EN 1090 |
|---|---|---|
| Scope | Service management systems (SMS) lifecycle | Structural steel/aluminium execution & conformity |
| Industry | All service providers, global ITSM focus | Construction/metal fabrication, EU market |
| Nature | Voluntary certifiable management standard | Mandatory harmonized CPR standard for CE |
| Testing | Internal audits, management reviews, certification | FPC certification, ITT/ITC, NB surveillance |
| Penalties | Loss of certification, market trust | Market exclusion, fines, legal liability |
Scope
Industry
Nature
Testing
Penalties
Frequently Asked Questions
Common questions about ISO 20000 and EN 1090
ISO 20000 FAQ
EN 1090 FAQ
You Might also be Interested in These Articles...
2026 GDPR Data Processing Blueprint: Implementing Consent Management in Semrush and Ahrefs Workflows
Implement GDPR Articles 6 & 7 in Semrush and Ahrefs workflows with our 2026 blueprint. Get checklists for audit-proof keyword tracking, backlinks, and data resi
Top 5 Reasons Automation Tools Like Vanta Slash SOC 2 Type 2 Timelines from Months to Weeks
Automation tools like Vanta cut SOC 2 Type 2 prep from 6 months to 6 weeks, saving 70% costs. See SignWell examples, AWS/Okta/GitHub integrations. CISOs: Get fi
You Guide on how to Start Implementing NIST CSF in Your Organization
Master NIST CSF implementation in your organization with this detailed guide. Learn core functions, key steps, best practices, and tips for cybersecurity succes
Run Maturity Assessments with GRADUM
Transform your compliance journey with our AI-powered assessment platform
Assess your organization's maturity across multiple standards and regulations including ISO 27001, DORA, NIS2, NIST, GDPR, and hundreds more. Get actionable insights and track your progress with collaborative, AI-powered evaluations.
Explore More Comparisons
See how ISO 20000 and EN 1090 compare against other standards