ISO 37301:2021 sets requirements for a compliance management system, identifying compliance obligations, assessing compliance risks, embedding controls and fostering a culture where people raise concerns. It is a natural home for the many local laws and regulations a growing organisation must track.
Who it is for
- Regulated groups with many overlapping obligations
- Boards wanting assurance over compliance
- Organisations consolidating several compliance programmes
What you gain
- A single register of compliance obligations
- Board-level visibility of compliance risk
- Foundation for integrating anti-bribery, privacy and sector rules
Your path to certification
Gap assessment
We compare what you do today with every requirement and control, then give you a prioritised gap report and a realistic timeline.
Design and documentation
Scope, policies, procedures, risk methodology and records, written to fit how your teams actually work, not a template binder.
Implementation and training
We help owners put controls in place, train the people who run them and start collecting evidence.
Internal audit and management review
An independent internal audit and a structured management review prove the system works before the certification body looks at it.
Certification audit support
We prepare you for Stage 1 and Stage 2 with your chosen accredited certification body and help close any findings quickly.
Surveillance and continual improvement
Optional managed support keeps evidence current through annual surveillance audits and the three-year recertification.