All of the ISO/IEC 20000 requirements have to be in place at an appropriate level.  It is not permitted to exclude parts of the standard by, for example, declining to carry out one or more of the processes.

Some processes may be outsourced, but they must be performed and the organisation being audited must demonstrate effective management control of those processes, including the interfaces with other, internal service management processes.