PECB

ISO 37301 is a standard of management system Type A which defines requirements and provides guidelines for the creation, development, implementation, evaluation, maintenance and continuous improvement of a Compliance Management System (CMS). A MSC provides organizations with a structured approach to meeting all compliance obligations, i.e., mandatory compliance requirements such as laws, regulations, court decisions, permits, licences, and those they voluntarily choose to comply with, such as internal policies and procedures, codes of conduct, standards and agreements with communities or NGOs.

ISO 37301 is applicable to all organisations, regardless of their size, nature or complexity. The MSC is based on the principles of integrity, good governance, proportionality, transparency, accountability and sustainability.

As with most management system standards, ISO 37301 also complies with the high-level structure (HLS) developed by ISO. The HLS structure defines the common terminology and definitions used, as well as the sequence of articles (1 to 10), where MSC requirements are set out in sections 4 to 10. The HLS structure allows organizations to integrate various management systems, which means that these organizations can either adopt a MSC as an autonomous management system or integrate it into other existing management systems.

Yes, in 2014, ISO 19600 Compliance Management Systems – Guidelines was published. The main difference between these two standards is that organisations can obtain certification according to ISO 37301 by submitting themselves to a conformity assessment via an independent third party. However, ISO 37301 relies on its predecessor (ISO 19600), and organizations that have established a MSC based on ISO 19600 guidelines are already ahead of time to comply with ISO 37301.

For organizations seeking long-term growth and success, continued adherence to compliance obligations is a necessity, not an option. A MSC based on the requirements and guidelines of ISO 37301 provides organizations with a set of tools (policies, processes and measures) to establish and maintain a compliance culture.

Organisations with an ISO 37301-based MSC are committed to meeting reliable standards of corporate governance, good practices and ethical conduct. However, the MSC cannot completely eliminate the risk of non-compliance. In this regard, the requirements and guidelines of ISO 37301 enhance the organization's ability to identify and respond to non-compliance. In some jurisdictions, the existence of a MSC may be an indicator of the organization's due diligence and commitment to compliance, which may be useful in limiting legal liability and reducing penalties for breaches of relevant laws.

ISO 37301 includes competence, communication and awareness requirements. By meeting these requirements, organizations ensure that the corporate vision is translated and integrated into the behaviour of managers and employees. ISO 37301 also requires and encourages the implementation of concise and effective policies, procedures and measures that put organizations on the path to a culture of compliance and high standards of ethics and integrity.

ISO 37301 describes the quest for compliance, which begins with defining the model at the top of the organisation. The commitment to a good compliance culture is formulated by the governing body and management of the organisation through a compliance policy and the definition of compliance objectives at different levels. In addition, the governing body and branch must also demonstrate leadership and commitment by providing the necessary resources, creating a compliance function, defining roles and responsibilities, etc. Above all, the governing body and the executive branch must demonstrate actively and clearly their commitment to the MSC through their actions and decisions.

Internationally recognized, PECB certifications represent the peer recognition of an individual's professional abilities to contribute to the MSC of any organization, as an auditor, implementation manager or member of the MSC implementation team. By participating in one of our ISO 37301 courses, you can develop your skills to help organisations meet their compliance obligations.

• ISO 37301 training Introduction is suitable for professionals who wish to have a brief and general understanding of the requirements of ISO 37301 for a MSC.
• The ISO 37301 Transition training is intended for professionals already familiar with ISO 19600 and who wish to update their knowledge.
• The ISO 37301 Foundation training is suitable for beginner professionals and members of a compliance team. This two-day course familiarizes you with the requirements and guidelines of ISO 37301 for a compliance management system.
• ISO 37301 Lead Implementationer is a five-day course that allows you to acquire the knowledge and skills necessary to implement a MSC in an organization, based on ISO 37301 requirements and guidelines.
• ISO 37301 Lead Auditor is also a five-day course to improve your professional ability to audit an ISO 37301-based SMC in accordance with the guidelines for auditing management systems provided in ISO 19011 and the certification process described in ISO/IEC 17021-1.

By implementing a MSC based on ISO 37301, organizations will be able to:

• Conduct a formal third party assessment of their MSC compliance
• Developing a positive compliance culture
• Quick and effective resolution of compliance issues
• Protecting their reputation and safeguarding their integrity by preventing and detecting unethical behaviour
• Improving business opportunities and sustainability
• Carefully review the requirements and expectations of internal and external stakeholders
• Developing strong and valuable relationships with regulators
• Increasing third-party confidence in their organization's ability to achieve sustainable success
• Building customer trust and loyalty

Given the rapid growth of industries and competition in the global market, being an ISO 37301 certified professional gives you the opportunity to help your organization meet compliance requirements on an ongoing basis.

Our experts are ready to help you in the process of obtaining ISO 37301 certification and to develop your professional skills.

Contact us to initiate the first step

Improve your knowledge and advance your career by participating in our ISO 37301 training courses. Check out the training below and find the one that suits you best.