This document provides an overview of IT service management (ITSM) and describes approaches to auditing ITSM. ITSM is a process-based framework for delivering quality IT services and managing the relationship between IT service providers and their customers. Core components of ITSM include service level management, change management, incident management, and problem management. The document concludes by listing some key areas that can be audited in ITSM, including service level management, IT financial management, and information security management.