Aior Teknoloji Limited Company now holds ISO/IEC 20000-1 for information technology service management. The certificate was issued by a certification body accredited by the Turkish Accreditation Agency (TÜRKAK). This note states what the certificate covers, what it means for customers, and which standards are still outside that claim.
What the certificate confirms
ISO/IEC 20000-1 confirms that a service management system is established and operated. The scope covers the service catalogue, incident and request management, change, release, capacity, continuity and continual improvement. The certificate does not claim that every product is uninterrupted, or that every request closes in a fixed number of minutes. Service levels are measured against the targets written in the selected plan.
What TÜRKAK confirms
TÜRKAK accredits certification bodies; it does not issue an ISO certificate directly to a company. Accreditation means the body that issued the certificate has been assessed as competent for the relevant standard. AIOR's certificate was obtained on that path. The certificate number and the name of the certification body are shared in writing on request; this page does not invent a number.
What changes in service management
- Services are defined in a catalogue: what is offered, and what is out of scope, is written down.
- Incidents, requests and changes are tracked as separate records, with priority and impact.
- A planned change does not reach production without approval and a rollback step.
- Continuity and restore-from-backup are followed with drill records.
- Customer complaints and internal nonconformities close through corrective action.
- Management review is based on measured service results.
The practical result for a customer
Hosting, email, servers, software and support requests sit inside the same service management system. When a record is opened, its owner, priority and closure criteria are known. A request outside scope is not done quietly; it is either brought into scope or quoted separately. That discipline produces a traceable service instead of support that runs on “we will see”.
What this certificate does not include
Preparations for an ISO 9001 quality management system and an ISO/IEC 27001 information security management system continue. There is no certification claim for those two standards. ISO/IEC 20000-1 does not stand in for an information security certificate. Personal data, access and record security are handled separately in the relevant contract and under data-protection duties.
The written policy
The public service management policy is the same text as controlled document AIOR-HYS-PLT-05 and lives on the service management policy page on aior.com. The certificate shows that the policy is operated as an audited system, not left on paper.
