What ISO 37301 covers
ISO 37301:2021 specifies requirements for establishing, implementing, evaluating, maintaining and improving an effective compliance management system. It gives an organisation a structured way to identify its compliance obligations, assign clear responsibilities, embed controls and monitoring, and demonstrate a genuine culture of compliance — moving compliance from a reactive, siloed activity to a managed, auditable capability.
Because ISO 37301 sets out requirements rather than guidance, a compliance management system can be independently certified against it — the certificate that customers, regulators and partners recognise. It replaced the withdrawn ISO 19600:2014, which offered only recommendations.
Climate change: since ISO’s February 2024 climate action amendment (ISO 37301:2021/Amd 1:2024), the standard requires you to determine whether climate change is a relevant issue for your organisation, and notes that interested parties can have climate-related requirements. Certification audits include it.
What ABS provides
For compliance management, ABS offers implementation and readiness consulting:
- ISO 37301 implementation — building or strengthening the compliance framework, obligations register, controls and monitoring needed to meet the standard
- Migration from ISO 19600:2014 — mapping an existing ISO 19600-based system to ISO 37301 and closing the gaps to reach certification readiness
This work sits within the governance-focused part of the ISO Certifications portfolio and pairs naturally with ISO 37001 for anti-bribery, which many organisations run alongside a broader compliance system.
Typical timeline
Implementing ISO 37301, or migrating an existing ISO 19600-based system, typically takes around 12–16 weeks depending on maturity and scope. The formal certification audit is conducted independently by an accredited certification body. Each engagement begins with a fixed-price scoping call and a proposal within 24 hours.
Common questions
What is ISO 37301 and how does it relate to ISO 19600?
ISO 37301:2021 is the international standard for a compliance management system. It replaced the withdrawn ISO 19600:2014 — where ISO 19600 offered guidance, ISO 37301 sets out auditable requirements, so a CMS can be independently certified. ABS helps you implement ISO 37301, and migrate an existing ISO 19600-based system where one is already in place.
How does ABS support the certification audit?
We prepare your organisation for the certification audit — implementation, readiness checks and evidence — and coordinate the engagement with your accredited certification body, supporting you through to successful certification.
Who needs ISO 37301?
Any organisation that wants to manage its compliance obligations in a structured, auditable way; the standard applies to every sector and size. It suits organisations whose customers, regulators and partners want evidence of a genuine culture of compliance, and organisations with an ISO 19600-based system to migrate.
How long does ISO 37301 certification take?
Implementing ISO 37301, or migrating an existing ISO 19600-based system, typically takes around 12–16 weeks depending on maturity and scope. The formal certification audit is conducted independently by an accredited certification body.
How long is an ISO 37301 certificate valid?
Three years. The certification body carries out surveillance audits in the first and second years, and a recertification audit before the three-year cycle ends.
Can ISO 37301 be combined with other standards?
Yes. ISO 37301 shares the harmonised structure of ISO management system standards, so it can run as one integrated management system with, for example, ISO 37001 or ISO 9001, and certification bodies can often audit them together.
Which edition of ISO 37301 is current, and is there a transition?
The current edition is ISO 37301:2021, with the climate change amendment added in 2024. There is no transition under way.
