What ISO 19600 covers
ISO 19600 set out guidance for a compliance management system — a structured way of identifying an organisation’s compliance obligations and managing them through clear responsibilities, controls and monitoring. It helped organisations move compliance from a reactive, siloed activity to a managed capability.
Important: ISO 19600 was withdrawn in 2021 and replaced by ISO 37301:2021. Where ISO 19600 was guidance, ISO 37301 is a certifiable management system standard. Organisations should generally be working toward ISO 37301 — but many still operate established ISO 19600-based systems, and ABS continues to support them.
What ABS provides
For compliance management, ABS offers two things:
- Support for existing ISO 19600 systems — keeping a compliance framework effective for organisations that built one
- A migration pathway to ISO 37301:2021 — mapping your current system to the certifiable standard and closing the gaps to achieve certification
This work sits within the governance-focused part of the ISO Certifications portfolio and pairs naturally with ISO 37001 for anti-bribery, which many organisations run alongside a broader compliance system.
Timeline & process
Migrating from ISO 19600 to ISO 37301, or strengthening an existing compliance system, typically takes around 12–16 weeks depending on maturity and scope. Each engagement begins with a fixed-price scoping call and a proposal within 24 hours.
Common questions
Is ISO 19600 still current?
No. ISO 19600 was withdrawn in 2021 and replaced by ISO 37301:2021, which is a certifiable compliance management system standard. ABS continues to support organisations operating under existing ISO 19600 systems and provides a clear migration pathway to ISO 37301.
What is the difference between ISO 19600 and ISO 37301?
ISO 19600 offered guidance on compliance management; ISO 37301:2021 turns that approach into a certifiable management system with auditable requirements. For most organisations, ISO 37301 is now the right destination — it provides the certificate customers and regulators recognise.
