IT service management, or ITSM, is the practice of designing, delivering, running and improving the IT services an organisation provides to its users. It treats IT as a set of services with agreed standards, so that technology is reliable and well supported. ITIL is the best-known framework for putting ITSM into practice.
What IT service management is
ITSM is the idea that IT should be organised and delivered as a set of clearly defined services, each with agreed quality standards and named accountability. The starting point is the user's experience: can they get help when something breaks, and does their technology work reliably enough to let them do their job?
The contrast is with the older model of IT as a collection of technical assets managed reactively. ITSM shifts the focus to outcomes for people: what does each service deliver, who is responsible for it, and how do you know it's performing well? That framing shapes everything from how your service desk operates to how changes to your systems are approved.
For a small or growing business, the practical value is straightforward: IT that's managed as a service is more predictable, better documented and easier to hold a supplier accountable for. That's what separates a mature IT partner from one that simply fixes things when they break, as covered in our article on the cost of IT downtime.
What ITSM covers
ITSM is a broad practice, but its core processes are consistent across most organisations and frameworks. The main ones are:
- Service desk: the single point of contact where users report problems and make requests.
- Incident management: restoring normal service as quickly as possible when something fails.
- Service request management: handling routine requests - password resets, software access and similar - as a defined, repeatable process.
- Change management: controlling changes to IT systems so that improvements don't accidentally cause new incidents.
- Problem management: finding and removing the root causes of recurring incidents, so the same problems stop coming back.
- Service level management: agreeing and monitoring the standards of IT service - usually through a service level agreement - to keep performance visible and accountable.
Together, these processes give you a structured, auditable way of delivering and improving IT. ISO/IEC 20000, the international standard for IT service management, formalises this structure and is the benchmark used by serious IT providers worldwide.
ITSM, ITIL and standards
ITSM is the discipline; frameworks and standards tell you how to practise it well. The most widely used framework is ITIL, now in its fourth version. PeopleCert, the official custodian of ITIL, describes it as guidance for creating, delivering and improving tech-enabled services in a way that meets the needs of users and organisations. ITIL doesn't prescribe rigid processes - it provides a practical body of guidance that organisations adapt to their own context.
Above the frameworks sits ISO/IEC 20000, the certifiable international standard for IT service management. It defines the requirements an organisation must meet to demonstrate that it manages IT services to a recognised level of quality and consistency. An IT provider that holds ISO/IEC 20000 certification has been independently audited against those requirements.
COBIT sits at the governance layer above ITSM, providing oversight of whether IT as a whole is serving the business. Our entry on IT governance explains how these three fit together.
Why ITSM matters to a buyer
When you're choosing or reviewing an IT partner, ITSM maturity is one of the clearest signals of how they'll perform. A provider with good ITSM practices gives you predictable, well-organised support with documented processes and visible service levels. You'll know what to expect, how to escalate when something goes wrong and how performance is measured.
The alternative - a provider that manages IT informally - may be cheaper, but the risk sits entirely with you. When something fails or a change causes an outage, there's no structured process to fall back on and no clear accountability for putting it right.
Asking a prospective IT provider which ITSM framework they follow, how they manage incidents and changes, and whether they hold ISO/IEC 20000 certification is a straightforward way to assess maturity before you commit.
Choosing a well-run IT partner matters Red Eagle Tech helps growing businesses choose and oversee IT partners who run services to recognised standards. Our technology governance service gives you the questions to ask, the standards to expect and the oversight structure to keep your IT provider accountable.
