ISO 37000:2021
The ISO guidance standard for governing bodies: the governance conditions (integrated governance, delegation, the governing body's composition and competence) and eleven principles, purpose at the centre, four foundational (value generation, strategy, oversight, accountability) and six enabling (stakeholder engagement, leadership, data and decisions, risk governance, social responsibility, viability over time), each with its key aspects of practice. Built from the complete copy read in full; guidance, not certifiable; the parent of ISO 37004, 37005, 37009 and ISO/IEC 38500 in the graph.
ISO 37000:2021 is a compliance framework from International (ISO/TC 309); adopted as BS ISO 37000:2021, SIST ISO 37000:2021 and others with 4 domains and 51 controls that map to 12 other frameworks. The largest domains are 6.6 to 6.11 Enabling principles: stakeholder engagement, leadership, data and decisions, risk governance, social responsibility, viability over time – ISO 37000:2021 (21 controls), 6.2 to 6.5 Foundational principles: value generation, strategy, oversight, accountability – ISO 37000:2021 (18 controls), Clause 4 The governance of organizations: conditions, delegation, the governing body – ISO 37000:2021 (8 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (4)
6.1 Purpose (primary principle) – ISO 37000:2021
| Code | Title |
|---|---|
| iso-37000-2021::6.1.1 | 6.1.1 Principle |
| iso-37000-2021::6.1.3.2 | 6.1.3.2 Define the organizational purpose |
| iso-37000-2021::6.1.3.3 | 6.1.3.3 Define the organizational values |
| iso-37000-2021::6.1.3.4 | 6.1.3.4 Commit to the organizational purpose and values |
6.2 to 6.5 Foundational principles: value generation, strategy, oversight, accountability – ISO 37000:2021
| Code | Title |
|---|---|
| iso-37000-2021::6.2.1 | 6.2.1 Principle |
| iso-37000-2021::6.2.3.1 | 6.2.3.1 General: the value generation model |
| iso-37000-2021::6.2.3.2 | 6.2.3.2 Define value |
| iso-37000-2021::6.2.3.3 | 6.2.3.3 Create value |
| iso-37000-2021::6.2.3.4 | 6.2.3.4 Deliver value |
| iso-37000-2021::6.2.3.5 | 6.2.3.5 Sustain value |
| iso-37000-2021::6.3.1 | 6.3.1 Principle |
| iso-37000-2021::6.3.3.1.1 | 6.3.3.1.1 Set strategic outcomes |
| iso-37000-2021::6.3.3.1.2 | 6.3.3.1.2 Establish governance policies |
| iso-37000-2021::6.3.3.2.1 | 6.3.3.2.1 Engage with strategic planning |
| iso-37000-2021::6.3.3.2.2 | 6.3.3.2.2 Steer the strategy |
| iso-37000-2021::6.4.1 | 6.4.1 Principle |
| iso-37000-2021::6.4.3.1 | 6.4.3.1 General: the four oversight duties |
| iso-37000-2021::6.4.3.2 | 6.4.3.2 Oversee performance |
| iso-37000-2021::6.4.3.3 | 6.4.3.3 Obtain assurance |
| iso-37000-2021::6.5.1 | 6.5.1 Principle |
| iso-37000-2021::6.5.3.2 | 6.5.3.2 Demonstrate accountability |
| iso-37000-2021::6.5.3.3 | 6.5.3.3 Hold to account |
6.6 to 6.11 Enabling principles: stakeholder engagement, leadership, data and decisions, risk governance, social responsibility, viability over time – ISO 37000:2021
| Code | Title |
|---|---|
| iso-37000-2021::6.10.1 | 6.10.1 Principle |
| iso-37000-2021::6.10.3 | 6.10.3 Key aspects of practice |
| iso-37000-2021::6.11.1 | 6.11.1 Principle |
| iso-37000-2021::6.11.3.2 | 6.11.3.2 Articulate an integrated view of value generation |
| iso-37000-2021::6.11.3.3 | 6.11.3.3 Assess system relationships |
| iso-37000-2021::6.11.3.4 | 6.11.3.4 Govern for organizational viability over time |
| iso-37000-2021::6.6.1 | 6.6.1 Principle |
| iso-37000-2021::6.6.3 | 6.6.3 Key aspects of practice |
| iso-37000-2021::6.7.1 | 6.7.1 Principle |
| iso-37000-2021::6.7.3.2 | 6.7.3.2 Demonstrate effective leadership |
| iso-37000-2021::6.7.3.3 | 6.7.3.3 Ensure ethical leadership |
| iso-37000-2021::6.7.3.4 | 6.7.3.4 Reconcile dilemmas |
| iso-37000-2021::6.8.1 | 6.8.1 Principle |
| iso-37000-2021::6.8.3.2.1 | 6.8.3.2.1 Ensure effective decision-making within the governing body |
| iso-37000-2021::6.8.3.2.2 | 6.8.3.2.2 Ensure effective decision-making throughout the organization |
| iso-37000-2021::6.8.3.3 | 6.8.3.3 Recognize data as a strategic resource |
| iso-37000-2021::6.8.3.4 | 6.8.3.4 Ensure responsible data use |
| iso-37000-2021::6.9.1 | 6.9.1 Principle |
| iso-37000-2021::6.9.3.2 | 6.9.3.2 Set the tone for the management of risk |
| iso-37000-2021::6.9.3.3 | 6.9.3.3 Practise effective risk management |
| iso-37000-2021::6.9.3.4 | 6.9.3.4 Oversee risk management |
Clause 4 The governance of organizations: conditions, delegation, the governing body – ISO 37000:2021
| Code | Title |
|---|---|
| iso-37000-2021::4.1 | 4.1 General |
| iso-37000-2021::4.2.1 | 4.2.1 General |
| iso-37000-2021::4.2.2 | 4.2.2 Governance and delegation |
| iso-37000-2021::4.2.3 | 4.2.3 Governance and management |
| iso-37000-2021::4.2.4 | 4.2.4 Governance and sustainability |
| iso-37000-2021::4.2.5 | 4.2.5 Governance and stakeholders |
| iso-37000-2021::4.3.1 | 4.3.1 Composition and structure |
| iso-37000-2021::4.3.2 | 4.3.2 Competence |
Your Compliance Coverage
If you comply with ISO 37000:2021, you already cover:
OECD/G20 Principles of Corporate Governance
5%
6 controls mapped
Compare →WHO Global Competency Model
5%
6 controls mapped
Compare →Maslach Burnout Inventory (MBI) and Areas of Worklife Survey (AWS) Model
5%
5 controls mapped
Compare →+ 9 more: Argyris Double-Loop Learning (5%), Kotter 8-Step Change Model (4%)
See all 12 mapped frameworks ↓Maps to 12 other frameworks
Coverage is not the same as your position
This page shows what ISO 37000:2021 overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.
The Compliance Position Diagnostic, $5,000 fixed, ten business daysWhat is ISO 37000:2021 and who does it apply to?
ISO 37000:2021 is a compliance framework from International (ISO/TC 309); adopted as BS ISO 37000:2021, SIST ISO 37000:2021 and others with 4 domains and 51 controls. The ISO guidance standard for governing bodies: the governance conditions (integrated governance, delegation, the governing body's composition and competence) and eleven principles, purpose at the centre, four foundational (value generation, strategy, oversight, accountability) and six enabling (stakeholder engagement, leadership, data and decisions, risk governance, social responsibility, viability over time), each with its key aspects of practice. Built from the complete copy read in full; guidance, not certifiable; the parent of ISO 37004, 37005, 37009 and ISO/IEC 38500 in the graph. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does ISO 37000:2021 actually require?
ISO 37000:2021 has 51 controls organised across 4 domains. The largest domains are 6.6 to 6.11 Enabling principles: stakeholder engagement, leadership, data and decisions, risk governance, social responsibility, viability over time – ISO 37000:2021 (21 controls), 6.2 to 6.5 Foundational principles: value generation, strategy, oversight, accountability – ISO 37000:2021 (18 controls), Clause 4 The governance of organizations: conditions, delegation, the governing body – ISO 37000:2021 (8 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of ISO 37000:2021 do I already cover?
ISO 37000:2021 maps to 12 other compliance frameworks. The top mapping partners are OECD/G20 Principles of Corporate Governance (5% coverage), WHO Global Competency Model (5% coverage), Maslach Burnout Inventory (MBI) and Areas of Worklife Survey (AWS) Model (5% coverage). Use our comparison tool to explore control-level mappings between frameworks.
How do I implement ISO 37000:2021?
Start your ISO 37000:2021 compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about ISO 37000:2021 requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 51 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,121 frameworks.
Get Started Free →Free forever, no credit card required