ISO 37301 · Compliance management systems
It requires identifying compliance obligations, assessing their risks and assigning responsibilities within a structure.
- Sectors
- Finance · Healthcare · Energy
- Edition
- ISO 37301:2021
ISO 37001Anti-bribery management systems
It requires assessing bribery risk and applying controls: due diligence, financial and non-financial controls and reporting channels.
Illustrative imageWhat it demonstrates
- It requires assessing bribery risk and applying controls: due diligence, financial and non-financial controls and reporting channels.
- The audit checks that those controls are implemented and reviewed.
- Sectors
- Government suppliers
- Infrastructure and public works
- Energy
- Healthcare
- Edition
- ISO 37001:2025
- Discipline
- Management systems
- Topic
- Integrity and continuity
Accredited scope published in the Trust Center · 30-06-2026
Why now
From 31 August 2026 every initial certification or recertification is against the 2025 edition; certificates on the 2016 edition migrate by 28 February 2027.
ISO 37001, step by step
Initial certification follows these steps.
- Enquiry and scope
What you are asked for, what activities you carry out, and at which sites and in which country you operate.
- Proposal
In writing, sized to the standard, the activities, the sites and the country.
- Audit
The assigned team assesses the documentation and the operation with evidence.
- Verifiable certificate
A function separate from the audit team decides. The certificate can be checked by its code.
- Continuity
Continuity of the cycle is agreed for your case.
- Who audits
- The audit team assigned to the case, with declared competence for the standard.
- Who decides
- A function separate from the audit, in accordance with ISO/IEC 17021-1.
- Who issues
- G-CERTI Co., Ltd.
- Where it is checked
- The public certificate register, by code. Verify
Issuance depends on the audit and an independent decision.
FAQ
How much does certification cost?
There is no list price: the proposal is sized on standard, scope, sites, headcount, activities, system complexity and delivery mode. The request is reviewed first and the proposal is then issued.
What happens if the audit raises findings?
Findings are documented and classified. The organization submits correction, root cause and corrective action with evidence; the audit team evaluates it and only then does the file go to decision.
Who decides on certification?
A competent function separate from the audit team. Those who audit do not decide, and no outcome is anticipated before that review.
Where can an issued certificate be checked?
In the public certificate register, by code.
Standards commonly integrated
Request your ISO 37001 proposal
The proposal arrives in writing, with the standard, the scope and the timeline.