ISO 37301

ISO 37301:2021

Compliance Management Systems

A framework for managing legal, regulatory, contractual and voluntary compliance obligations systematically.

ISO 37301:2021 service visual

Who this standard can apply to

Corporate and professional organizations
Educational and regulated institutions
Public-sector entities
Nonprofits and associations
Organizations with complex compliance obligations

Typical areas reviewed

Compliance obligations and risk assessment
Governance and accountability
Policies, controls and training
Monitoring and reporting
Investigation, corrective action and improvement

Certification pathway

Application & Scope

Confirm the organization, sites, activities, requested standard and intended certification scope.

Document Review

Review relevant policies, procedures, records, objectives and management-system evidence.

Assessment / Audit

Evaluate implementation and objective evidence against the applicable requirements and approved arrangement.

Findings & Corrective Action

Where findings are identified, corrective action and supporting evidence are reviewed before closure.

Decision & Status

A defined decision is recorded with scope, validity and any applicable conditions or limitations.

Surveillance & Renewal

Ongoing status, surveillance and renewal requirements are managed according to the applicable certification arrangement.

Scope & Transparency

Certification, where offered, applies only to the defined management-system scope and responsible certification arrangement. It does not mean that ISO itself has certified or endorsed the organization.