ISO 37301: Compliance Management System
ISO 37301: Compliance Management System for Ethical and Responsible Organizations
ISO 37301 establishes requirements and provides guidelines for implementing, developing, maintaining and improving a Compliance Management System (CMS). This standard is applicable to any type of organization, regardless of size, sector or location. It replaces and extends the former ISO 19600, offering certifiable requirements.
The main objective is to help organizations comply with all legal, regulatory and voluntary obligations, strengthening the culture of compliance and corporate integrity.
Main requirements of the ISO 37301 standard
- Organizational context: Identification of relevant compliance obligations and stakeholders.
- Leadership and Commitment: Senior management drive, assignment of responsibilities and establishment of compliance policies.
- Planning: Non-compliance risk assessment and compliance target setting.
- Support: Resources, competence, awareness, communication and control of documented information.
- Operation: Processes and controls to ensure compliance.
- Performance evaluation: Monitoring, internal audit, management review.
- Improvement: Management of non-conformities and corrective actions.
Practical measures to comply with ISO 37301
- Mapping of relevant legal and contractual obligations.
- Create or update the compliance policy.
- Establish channels for reporting and managing ethical alerts.
- Designate a compliance officer or compliance committee.
- Implement procedures for the evaluation and mitigation of non-compliance risks.
- Develop compliance training and awareness programs.
- Periodically audit the effectiveness of the system.
Advantages of ISO 37301 certification
For the organization:
- Reduced risk of sanctions, fines and reputational damage.
- Improved ethical and responsible decision making.
- Organizational culture based on integrity.
For customers:
- Increased confidence in processes and products
- Transparency and accountability in operations.
For the market:
- Improved competitiveness and reputation.
- Compliance with international standards that facilitate global expansion.
ISO 37301: Application by sector and industry
Regulated companies
Public agencies and administrations
Multinationals
Companies certified to other ISO standards
Compliance is not a burden, it is an opportunity to lead with integrity.
Measuring your current situation is the basis for building a future free of legal risks.
BLOG: practical articles for responsible leaders
PetroShore Compliance reaffirms its commitment to the SDGs on the 10th anniversary of Agenda 2030
PetroShore Compliance reinforces its commitment to the SDGs by participating in the #ODSforFlag campaign. The company is committed to a sustainable strategy aligned with the 2030 Agenda.
Independent Whistleblower Protection Authority: What is the I.I.P.A. and how does it affect your company?
The I.P.P.A. comes into force in 2025 and requires effective reporting channels. Companies must adapt now to Law 2/2023 to avoid penalties.
Best practices in policies, standards and internal control: essential foundations for corporate integrity
Explore the essential fundamentals of an effective internal control system. Learn how to align standards and policies with international best practices.
PetroShore Compliance participates in development of new IRMA standard
PetroShore Compliance joins the technical committee of the IRMA standard, with Dr. Andrea Moreno as International Consultant. A firm step towards excellence in responsible mining.
