ITIL vs EN 1090
ITIL
Best-practices framework for IT service management
EN 1090
EU standard for execution and CE marking of steel/aluminium structures
Quick Verdict
ITIL provides flexible ITSM best practices for global IT organizations to align services with business goals, while EN 1090 mandates CE marking conformity for EU steel/aluminium fabricators to ensure structural safety and market access.
ITIL
ITIL 4 IT Service Management Framework
Key Features
- Service Value System for holistic value co-creation
- 34 flexible practices across three management categories
- Seven guiding principles enabling iterative progress
- Four dimensions ensuring balanced service management
- Continual improvement model embedded in all activities
EN 1090
EN 1090 Execution of steel and aluminium structures
Key Features
- Risk-based Execution Classes EXC1-EXC4
- Factory Production Control FPC certification
- CE marking with Notified Body oversight
- Welding quality via ISO 3834 alignment
- Materials and processes full traceability
Detailed Analysis
A comprehensive look at the specific requirements, scope, and impact of each standard.
ITIL Details
What It Is
ITIL 4 is a standalone framework (formerly Information Technology Infrastructure Library) of best practices for IT Service Management (ITSM). Its primary purpose is aligning IT services with business objectives via a flexible, value-driven Service Value System (SVS) approach, evolved from 1980s UK government origins to support modern digital transformation.
Key Components
- **SVSGuiding principles, governance, service value chain (6 activities), 34 practices, continual improvement.
- Practices: 14 general, 17 service (e.g., incident, change), 3 technical.
- 7 Guiding Principles (e.g., Focus on Value, Progress Iteratively).
- **4 DimensionsOrganizations/people, information/technology, partners/suppliers, value streams/processes.
- PeopleCert-managed certifications (Foundation to Strategic Leader).
Why Organizations Use It
Drives cost savings, 87% adoption for quality/alignment, risk mitigation ($3M+ breaches), 20% faster resolutions, DevOps integration. Builds stakeholder trust, ROI (10:1-38:1), competitive edge in hybrid environments.
Implementation Overview
Phased 10-step roadmap: assessment, gap analysis, role definition, training, tool integration (e.g., CMDB). Tailored for all sizes/industries; 12-18 months typical. Voluntary, aligns ISO 20000; certifications recommended.
EN 1090 Details
What It Is
EN 1090 is the harmonized European standard family (EN 1090-1, -2, -3) for execution and conformity assessment of structural steel and aluminium components under the Construction Products Regulation (CPR). It ensures safe fabrication, assembly, and market placement via CE marking. Adopts a risk-based methodology through Execution Classes (EXC1–EXC4) scaling requirements by failure consequence, service, and production categories.
Key Components
- **Factory Production Control (FPC)Certified internal system for traceability, inspection, and processes.
- Technical rules (EN 1090-2/-3): Materials, welding (ISO 3834), tolerances, corrosion protection, NDT.
- **AVCP systemsNotified Body certification, ITT/ITC, ongoing surveillance.
- Declaration of Performance (DoP) and CE marking.
Why Organizations Use It
- Mandatory for EU/EEA market access.
- Mitigates liability, reduces rework, enables high-risk projects.
- Builds stakeholder trust, competitive edge in tenders.
Implementation Overview
- Phased: Gap analysis, FPC build, training, NB audits.
- Applies to fabricators; 3-12 months typical; requires surveillance.
Key Differences
| Aspect | ITIL | EN 1090 |
|---|---|---|
| Scope | IT Service Management best practices, 34 practices, SVS | Structural steel/aluminium execution, conformity assessment |
| Industry | Global IT organizations, all sizes, ITSM focus | EU construction, steel/aluminium fabricators |
| Nature | Voluntary framework, certifications available | Mandatory harmonized standard for CE marking |
| Testing | Self-assessments, certifications, continual improvement | FPC certification, NB audits, surveillance |
| Penalties | No legal penalties, loss of certification | Market exclusion, fines, legal liability |
Scope
Industry
Nature
Testing
Penalties
Frequently Asked Questions
Common questions about ITIL and EN 1090
ITIL FAQ
EN 1090 FAQ
You Might also be Interested in These Articles...
SOC 2 for Fintech Startups: First 5 Steps to Compliance with Confidentiality Criterion Infographic
First 5 steps to SOC 2 compliance with Confidentiality for fintech SaaS. Infographic maps controls to risks like encryption & TPRM. Integrates GLBA/PCI DSS over
The NIS2 "FTE Trap": Why 5 Analysts for 24/7 Security is Actually 8 (and Why the Board Needs to Know)
Exposed: NIS2 FTE Trap math shows 5 analysts fail 24/7 coverage due to sickness, training, leave & 2026 churn. Line-by-line breakdown for compliance. Alert your
Real-World ISO 27701 Success: Synthesized Case Studies, Metrics, and Lessons for Privacy Resilience
Real-world ISO 27701 success from Tribeca, Kocho: DSAR efficiency gains, risk score reductions, certification ROI. Synthesized metrics prove privacy resilience
Run Maturity Assessments with GRADUM
Transform your compliance journey with our AI-powered assessment platform
Assess your organization's maturity across multiple standards and regulations including ISO 27001, DORA, NIS2, NIST, GDPR, and hundreds more. Get actionable insights and track your progress with collaborative, AI-powered evaluations.
Explore More Comparisons
See how ITIL and EN 1090 compare against other standards