ISO 37301: Compliance Management System
ISO 37301: Compliance Management System for Ethical and Responsible Organizations
ISO 37301 establishes requirements and provides guidelines for implementing, developing, maintaining and improving a Compliance Management System (CMS). This standard is applicable to any type of organization, regardless of size, sector or location. It replaces and extends the former ISO 19600, offering certifiable requirements.
The main objective is to help organizations comply with all legal, regulatory and voluntary obligations, strengthening the culture of compliance and corporate integrity.
Main requirements of the ISO 37301 standard
- Organizational context: Identification of relevant compliance obligations and stakeholders.
- Leadership and Commitment: Senior management drive, assignment of responsibilities and establishment of compliance policies.
- Planning: Non-compliance risk assessment and compliance target setting.
- Support: Resources, competence, awareness, communication and control of documented information.
- Operation: Processes and controls to ensure compliance.
- Performance evaluation: Monitoring, internal audit, management review.
- Improvement: Management of non-conformities and corrective actions.
Practical measures to comply with ISO 37301
- Mapping of relevant legal and contractual obligations.
- Create or update the compliance policy.
- Establish channels for reporting and managing ethical alerts.
- Designate a compliance officer or compliance committee.
- Implement procedures for the evaluation and mitigation of non-compliance risks.
- Develop compliance training and awareness programs.
- Periodically audit the effectiveness of the system.
Advantages of ISO 37301 certification
For the organization:
- Reduced risk of sanctions, fines and reputational damage.
- Improved ethical and responsible decision making.
- Organizational culture based on integrity.
For customers:
- Increased confidence in processes and products
- Transparency and accountability in operations.
For the market:
- Improved competitiveness and reputation.
- Compliance with international standards that facilitate global expansion.
ISO 37301: Application by sector and industry
Regulated companies
Public agencies and administrations
Multinationals
Companies certified to other ISO standards
Compliance is not a burden, it is an opportunity to lead with integrity.
Measuring your current situation is the basis for building a future free of legal risks.
BLOG: practical articles for responsible leaders
ISO management systems in Angolan mining: interview with Dr. Irene Barata, Managing Director of PetroShore Compliance
Dr. Irene Barata, CEO of PetroShore Compliance, discusses the strategic value of ISO systems in Angola's mining industry. The interview covers operational maturity, sustainability, investor relations, and future trends.
ENDIAMA E.P. strengthens its governance with ISO 9001 and ISO 14001 certifications
ENDIAMA achieves ISO 9001 and ISO 14001 certifications, consolidating a process of institutional standardization and continuous improvement in the Angolan mining sector.
SMLuele sets a milestone in Angolan mining with its triple ISO certification
SMLuele obtains triple ISO certification in mining, thanks to the support of PetroShore, consolidating an integrated system of quality, environment, and occupational safety in Angola.
The importance of the audit program according to ISO 19011
The ISO 19011 audit program is a strategic tool for strengthening compliance, improving processes, and ensuring organizational conformity. Its correct implementation drives continuous improvement.
