ISO 37301:2021 4.1: Understanding the organization and its context
The organization shall identify the internal and external issues that bear on its purpose and on its capacity to deliver what the CMS is meant to achieve, taking into account at least its business model (the strategy, nature, scale, complexity and sustainability of its activities and operations); the nature and extent of its business relationships with third parties; the legal and regulatory context; the economic situation; the social, cultural and environmental context; its internal structures, its policies, processes and procedures, and its resources, technology among them; and its own compliance culture. Amendment 1:2024 adds a duty to decide whether climate change is one of the relevant issues.
This control maps to 28 controls across 21 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.