What is ISO 37301?
ISO 37301 sets out requirements for a compliance management system, enabling organisations to identify, meet and manage their compliance obligations and embed a culture of integrity.
Benefits of Certification
- ✔Systematically manage compliance obligations
- ✔Reduce regulatory and reputational risk
- ✔Demonstrate good governance
- ✔Build a culture of integrity
- ✔Support other management systems
Scope
For all types of organisation seeking to establish, develop and improve a compliance management system.
Who it applies to
- ●Corporates & enterprises
- ●Public sector & government
- ●Financial & professional services
- ●Infrastructure & asset owners
- ●Facilities & real estate
- ●Non-profit organisations
What the scope covers
- ▸Governance, roles and responsibilities
- ▸Identification of obligations and risks
- ▸Operational planning and controls
- ▸Leadership and organisational culture
- ▸Performance evaluation and reporting
- ▸Continual improvement
Key Requirements
- ▸Identification of compliance obligations
- ▸Compliance risk assessment
- ▸Leadership and compliance culture
- ▸Controls and operational planning
- ▸Performance evaluation and reporting
- ▸Continual improvement
Certification Process
- 1
Application & Quotation
Submit your details and receive a tailored, fixed-price quotation based on scope, sites and headcount.
- 2
Gap Analysis (Optional)
An optional pre-audit review identifies gaps between your current practices and the standard.
- 3
Stage 1 Audit
Documentation review to confirm your management system is designed and ready for assessment.
- 4
Stage 2 Audit
On-site (or remote) assessment of the implementation and effectiveness of your system.
- 5
Certification Decision
An independent technical review leads to the certification decision and issue of your certificate.
- 6
Surveillance & Renewal
Annual surveillance audits maintain your certification over the three-year cycle before recertification.
Documents Required
- 📄Company registration / incorporation details
- 📄Organisation chart and list of sites
- 📄Scope statement of activities
- 📄Management system manual / documented information
- 📄Key policies and procedures relevant to the standard
- 📄Records demonstrating implementation (audits, reviews, training)
Frequently Asked Questions
How long does ISO 37301 certification take?
Typical timelines range from 4 to 12 weeks depending on the size of your organisation, the number of sites and how mature your existing management system is.
How long is a ISO 37301 certificate valid?
Certificates are issued for a three-year cycle, subject to successful annual surveillance audits, after which recertification renews the cycle.
Can the audit be conducted remotely?
Yes. Where appropriate, UKCTL can conduct Stage 1 and parts of Stage 2 remotely, combined with on-site verification as required.
Is ISO 37301 certification accredited?
UKCTL issues accredited certificates recognised internationally, giving your customers and stakeholders confidence in the assessment.
Get ISO 37301 certified with UKCTL
Apply Now