ISO 37301: Compliance Management System

ISO 37301: Compliance Management System for Ethical and Responsible Organizations

ISO 37301 establishes requirements and provides guidelines for implementing, developing, maintaining and improving a Compliance Management System (CMS). This standard is applicable to any type of organization, regardless of size, sector or location. It replaces and extends the former ISO 19600, offering certifiable requirements.

The main objective is to help organizations comply with all legal, regulatory and voluntary obligations, strengthening the culture of compliance and corporate integrity.

Main requirements of the ISO 37301 standard

Organizational context: Identification of relevant compliance obligations and stakeholders.
Leadership and Commitment: Senior management drive, assignment of responsibilities and establishment of compliance policies.
Planning: Non-compliance risk assessment and compliance target setting.
Support: Resources, competence, awareness, communication and control of documented information.
Operation: Processes and controls to ensure compliance.
Performance evaluation: Monitoring, internal audit, management review.
Improvement: Management of non-conformities and corrective actions.

Practical measures to comply with ISO 37301

Mapping of relevant legal and contractual obligations.
Create or update the compliance policy.
Establish channels for reporting and managing ethical alerts.
Designate a compliance officer or compliance committee.
Implement procedures for the evaluation and mitigation of non-compliance risks.
Develop compliance training and awareness programs.
Periodically audit the effectiveness of the system.

Advantages of ISO 37301 certification

For the organization:

For customers:

For the market:

ISO 37301: Application by sector and industry

Regulated companies

In highly supervised sectors such as finance, healthcare or energy, ISO 37301 allows demonstrating rigorous compliance with regulatory bodies and strengthening institutional confidence.

Public agencies and administrations

Adoption of ISO 37301 in government entities boosts transparency, internal control and accountability to the public

Multinationals

For companies with an international presence, ISO 37301 facilitates the harmonization of compliance practices in various jurisdictions, mitigating cross-border legal risks.

Companies certified to other ISO standards

Integrating ISO 37301 with existing systems such as ISO 9001 or ISO 14001 enhances coherent, compliance-oriented, ethical and sustainable organizational management.

Compliance is not a burden, it is an opportunity to lead with integrity.

Measuring your current situation is the basis for building a future free of legal risks.