Compliance is an organization's systematic adherence to applicable laws, regulations, norms and standards.
Compliance involves identification, assessment and proactive management of all legal, regulatory, contractual and voluntary obligations. ISO 37301 provides the certifiable framework. An effective program includes non-compliance risk assessment, policies, training, monitoring, whistleblowing and continual improvement.
ISO 37301:2021 is the certifiable standard. It replaced ISO 19600 and establishes auditable requirements.
Compliance is the ongoing state of adherence. Audit is a point-in-time verification. Audit evaluates compliance, but complying is permanent.
Need an assessment in this area?