{"id":34370,"date":"2021-05-25T09:39:41","date_gmt":"2021-05-25T07:39:41","guid":{"rendered":"https:\/\/eiposgrados.com\/?p=34370"},"modified":"2021-05-25T10:14:53","modified_gmt":"2021-05-25T08:14:53","slug":"compliance-management-systems","status":"publish","type":"post","link":"https:\/\/eiposgrados.com\/eng\/blog-dpo\/sistemas-de-gestion-de-cumplimiento\/","title":{"rendered":"ISO 37301 Compliance management systems"},"content":{"rendered":"

The International Organization for Standardization (ISO) <\/strong>Last April, it published the ISO 37301 standard for compliance management systems. This is a standard that replaces ISO 19600:2014, which was a reference for the implementation of compliance management systems.<\/strong><\/p>\n\n\n\n

\"compliance<\/figure><\/div>\n\n\n\n

What's new in ISO 37301<\/h2>\n\n\n\n

The ISO 37301 <\/strong>of Compliance presents important news:<\/strong><\/p>\n\n\n\n

It is certifiable<\/strong>: The first difference with respect to its predecessor is the fact that the new ISO 37301 is certifiable,<\/strong> That is, organizations will be able to prove compliance with said standard. <\/p>\n\n\n\n

Includes the compliance culture:<\/strong> It incorporates a guidance annex <\/strong>for use and has specific requirements on compliance culture, collecting specific examples on the essential factors for the creation and development of the compliance culture.<\/p>\n\n\n\n

Encourage the use of Whistleblowing tools: <\/strong>They are established specific requirements<\/strong> to ensure the effectiveness of these tools.<\/p>\n\n\n\n

More relevance of the organization's context: <\/strong>ISO 19600 does not give prominence to the context of the organization, however, it is a key element <\/strong>in regulatory compliance, especially when evaluating and identifying risks.\u00a0<\/strong><\/p>\n\n\n\n

Clearer responsibilities: <\/strong>ISO 37301 provides flexibility<\/strong> and allows organizations, depending on their structure, to adapt the assignment of responsibilities according to their particular conditions. However, it clarifies that the final responsibility for compliance management from a legal point of view lies with senior management.<\/p>\n\n\n\n

Non-conformity and non-compliance:<\/strong> It maintains the distinction between \u201cnon-conformity\u201d and \u201cnon-compliance\u201d<\/strong> already contemplated in ISO 19600. \u201cNon-conformity\u201d refers to the violation of a requirement of the Management System, while \u201cnon-compliance\u201d constitutes the violation of an imperative obligation.<\/p>\n\n\n\n

Between his main objectives<\/strong> this:<\/p>\n\n\n\n