ISO 37301: Compliance Management System
ISO 37301: Compliance Management System for Ethical and Responsible Organizations
ISO 37301 establishes requirements and provides guidelines for implementing, developing, maintaining and improving a Compliance Management System (CMS). This standard is applicable to any type of organization, regardless of size, sector or location. It replaces and extends the former ISO 19600, offering certifiable requirements.
The main objective is to help organizations comply with all legal, regulatory and voluntary obligations, strengthening the culture of compliance and corporate integrity.
Main requirements of the ISO 37301 standard
- Organizational context: Identification of relevant compliance obligations and stakeholders.
- Leadership and Commitment: Senior management drive, assignment of responsibilities and establishment of compliance policies.
- Planning: Non-compliance risk assessment and compliance target setting.
- Support: Resources, competence, awareness, communication and control of documented information.
- Operation: Processes and controls to ensure compliance.
- Performance evaluation: Monitoring, internal audit, management review.
- Improvement: Management of non-conformities and corrective actions.
Practical measures to comply with ISO 37301
- Mapping of relevant legal and contractual obligations.
- Create or update the compliance policy.
- Establish channels for reporting and managing ethical alerts.
- Designate a compliance officer or compliance committee.
- Implement procedures for the evaluation and mitigation of non-compliance risks.
- Develop compliance training and awareness programs.
- Periodically audit the effectiveness of the system.
Advantages of ISO 37301 certification
For the organization:
- Reduced risk of sanctions, fines and reputational damage.
- Improved ethical and responsible decision making.
- Organizational culture based on integrity.
For customers:
- Increased confidence in processes and products
- Transparency and accountability in operations.
For the market:
- Improved competitiveness and reputation.
- Compliance with international standards that facilitate global expansion.
ISO 37301: Application by sector and industry
Regulated companies
Public agencies and administrations
Multinationals
Companies certified to other ISO standards
Compliance is not a burden, it is an opportunity to lead with integrity.
Measuring your current situation is the basis for building a future free of legal risks.
BLOG: practical articles for responsible leaders
EU Wage Transparency Directive: What employees and companies should know and how to act
The new EU Pay Transparency Directive introduces key measures to ensure equal pay for men and women. Find out what it means for companies and employees, and how to prepare ahead of its entry into force in 2026.
Aminer adds PetroShore as new partner to drive more ethical, sustainable and competitive mining
PetroShore Compliance joins AMINER as a new partner, reaffirming its commitment to ethical, sustainable mining aligned with the highest international standards. With a presence in 18 countries, PetroShore brings its expertise in compliance, ISO certifications and governance to the Spanish mining ecosystem.
PetroShore Compliance joins ARIGAL to strengthen compliance in the mining and energy sector
PetroShore Compliance partners with ARIGAL to offer specialized compliance solutions to the aggregates sector, strengthening its commitment to a more ethical and sustainable industry.
ISO 31000 Risk Management: How to protect and strengthen your organization
Discover how ISO 31000:2018 guides risk management to increase your organization's resilience and strategic value.
