ISO 37301
Compliance Management System
What is ISO 37301?
UNI has recently published ISO 37301:2021 “Compliance management systems – Requirements with guidance for use”. The new standard actually represents a key step in the regulatory framework for the governance of organizations. Specifically, the ISO 37301 standard outlines some specific requirements, which certainly represent innovations in the field of ISO management systems, for example, governing body, compliance function, compliance risk assessment process. The 37301 of 2021 – Compliance Management System (CMS – Compliance Management System) – is configured as a first edition, but it is actually the evolution of the UNI ISO 19600:2016 standard , Compliance management systems – Guidelines. Furthermore, ISO 37301 constitutes (together with ISO 37000, a standard whose publication and official status is expected for June 2021), a cornerstone of the emerging corpus of standards on organizational governance, developed by the International Technical Committee ISO/TC 309 “Governance of organizations”.
In the same regulatory framework there are references and principles to the issues specific to UNI ISO 37001:2016 , Management systems for the prevention of corruption and 37002, the standard that concerns the implementation, evaluation and improvement of the management system for reporting illicit activities and is based on the principles of trust, impartiality and protection.
How do I get certified?
The certification process according to the ISO 37301 standard includes:
- the request for quotation
- acceptance of the offer
- carrying out a pre-assessment audit (optional)
- carrying out a Certification audit (divided into two stages)
- the management of any deficiencies found
- the certification resolution
- maintenance checks with annual frequency
Key Points
ISO 37301 is a voluntary certification, based on seven management principles:
- Customer focus
- Leadership
- Staff involvement
- Process approach
- Continuous improvement
- Decisions based on facts
- Mutually beneficial relationships with suppliers
The Compliance Management System model is flexible enough to interact with other management models and techniques used by organizations in their business since all management systems, regardless of application specifications, have the common purpose of eliminating or reducing risks due to the variability and complexity of the context.ridurre i rischi dovuti alla variabilità e complessità del contesto.
Advantages
An organization can derive numerous benefits from the Certification of a Management System in accordance with ISO 37301, such as:
- Improving business organization
- Increased credibility and improved external image
- Reduction of costs due to waste, rework or management inefficiencies
- Improved relationship with staff
- Continuous improvement of quality performances
- Reduction of customer complaints and disputes
- Positive reception from the national and international market
- Ease of export by meeting the requirements of international customers