ISO 37301: Compliance Management System
ISO 37301: Compliance Management System for Ethical and Responsible Organizations
ISO 37301 establishes requirements and provides guidelines for implementing, developing, maintaining and improving a Compliance Management System (CMS). This standard is applicable to any type of organization, regardless of size, sector or location. It replaces and extends the former ISO 19600, offering certifiable requirements.
The main objective is to help organizations comply with all legal, regulatory and voluntary obligations, strengthening the culture of compliance and corporate integrity.
Main requirements of the ISO 37301 standard
- Organizational context: Identification of relevant compliance obligations and stakeholders.
- Leadership and Commitment: Senior management drive, assignment of responsibilities and establishment of compliance policies.
- Planning: Non-compliance risk assessment and compliance target setting.
- Support: Resources, competence, awareness, communication and control of documented information.
- Operation: Processes and controls to ensure compliance.
- Performance evaluation: Monitoring, internal audit, management review.
- Improvement: Management of non-conformities and corrective actions.
Practical measures to comply with ISO 37301
- Mapping of relevant legal and contractual obligations.
- Create or update the compliance policy.
- Establish channels for reporting and managing ethical alerts.
- Designate a compliance officer or compliance committee.
- Implement procedures for the evaluation and mitigation of non-compliance risks.
- Develop compliance training and awareness programs.
- Periodically audit the effectiveness of the system.
Advantages of ISO 37301 certification
For the organization:
- Reduced risk of sanctions, fines and reputational damage.
- Improved ethical and responsible decision making.
- Organizational culture based on integrity.
For customers:
- Increased confidence in processes and products
- Transparency and accountability in operations.
For the market:
- Improved competitiveness and reputation.
- Compliance with international standards that facilitate global expansion.
ISO 37301: Application by sector and industry
Regulated companies
Public agencies and administrations
Multinationals
Companies certified to other ISO standards
Compliance is not a burden, it is an opportunity to lead with integrity.
Measuring your current situation is the basis for building a future free of legal risks.
BLOG: practical articles for responsible leaders
AML/CTF implementation in Angola: Law 11/24 and the real operational challenge
Law 11/24 strengthens Angola's legal framework against money laundering and terrorist financing, but the real challenge is operational.
The critical point is transforming AML/CTF obligations into effective controls, organized evidence, and integration into daily risk management.
Compliance and transparency in Angola: challenges that require more than just rules
Angola is making progress in terms of transparency and governance, but the actual implementation of compliance remains a challenge. Learn about the key factors for making it effective.
What the January 2026 railway incidents reveal about passenger safety
The railway incidents of January 2026 show that passenger safety is a complex socio-technical system. Infrastructure, software, weather, and regulations must be managed in an integrated manner.
ISO management systems in Angolan mining: interview with Dr. Irene Barata, Managing Director of PetroShore Compliance
Dr. Irene Barata, CEO of PetroShore Compliance, discusses the strategic value of ISO systems in Angola's mining industry. The interview covers operational maturity, sustainability, investor relations, and future trends.
