ISO 37301:2021
Context of the organization – ISO 37301:2021

ISO 37301:2021 4.3: Determining the scope of the compliance management system

To fix the scope of the CMS, the organization shall decide where its boundaries lie and where it applies, taking account of the internal and external issues identified in 4.1 and of what 4.2, 4.5 and 4.6 require. It should make plain the main compliance risks the organization faces and its geographic and organizational limits, especially where it belongs to a bigger entity, and shall be kept as documented information.

Maintained by Gerard Blokdyk

What else in your programme already covers this

This control maps to 11 controls across 11 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO 14001:2015 · 1 control

  • 4.3 Determining the scope of the environmental management system

ISO 22000:2018 · 1 control

  • 4.3 Determining the scope of the food safety management system

ISO 22301:2019 · 1 control

  • 4.3 Determining the scope of the business continuity management system

ISO 27701:2019 · 1 control

  • 4.3 Application of ISO/IEC 27002:2013 guidelines

ISO 37001:2016 · 1 control

  • 4.3 4.3 Determining the scope of the anti-bribery management system
  • ISO-41001-4.3 Determining the scope of the FM management system

ISO 45001:2018 · 1 control

  • 4.3 Determining the scope of the OH&S management system
  • 4.3 Determining the scope of the energy management system

ISO 55001:2014 · 1 control

  • 4.3 Determining the scope of the asset management system

ISO 9001:2015 · 1 control

  • 4.3 Determining the scope of the quality management system

ISO/IEC 42001:2023 · 1 control

  • 4.3 Determining the scope of the AI management system

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Context of the organization – ISO 37301:2021

Query this from an agent

The graph holds this control, the 11 it maps to, and the evidence behind each claim, over MCP and REST.