ISO 37301

International

v2021

15 domains

43 controls

Compliance management systems

Unverified

ISO 37301 is a compliance framework from International with 15 domains and 43 controls that map to 72 other frameworks. The largest domains are ISO 37301: Leadership & Planning (6 controls), ISO 37301: Operational Controls (5 controls), ISO 37301: Performance Evaluation (5 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (15)

Context

2 controls

Controls in the Context domain of ISO 37301: 2 controls
Code	Title	Description
ISO37301-4.1	Understanding the Organization and Context	Determine external and internal issues relevant to the compliance management system and its ability to achieve intended...
ISO37301-4.2	Needs and Expectations of Interested Parties	Identify interested parties, their requirements, and which are addressed via compliance obligations.

ISO 37301: Improvement

3 controls

Continual improvement of quality management system (ISO 37301)

Controls in the ISO 37301: Improvement domain of ISO 37301: 3 controls
Code	Title	Description
ISO37301-16	Continual improvement methodology	Continual improvement methodology. Control from ISO 37301 framework, domain: ISO 37301: Improvement.
ISO37301-17	Corrective and preventive actions	Corrective and preventive actions. Control from ISO 37301 framework, domain: ISO 37301: Improvement.
ISO37301-18	Innovation and change management	Innovation and change management. Control from ISO 37301 framework, domain: ISO 37301: Improvement.

ISO 37301: Leadership & Planning

6 controls

Quality management leadership and planning (ISO 37301)

Controls in the ISO 37301: Leadership & Planning domain of ISO 37301: 6 controls
Code	Title	Description
ISO37301-01	Cl. 4.1-4.6 Compliance management policy - compliance obligations, objectives, and applicable compliance requirements	Quality policy and objectives. Control from ISO 37301 framework, domain: ISO 37301: Leadership & Planning.
ISO37301-02	Leadership commitment to quality	Leadership commitment to quality. Control from ISO 37301 framework, domain: ISO 37301: Leadership & Planning.
ISO37301-03	Risk-based thinking and planning	Risk-based thinking and planning. Control from ISO 37301 framework, domain: ISO 37301: Leadership & Planning.
ISO37301-04	Resource management for quality	Resource management for quality. Control from ISO 37301 framework, domain: ISO 37301: Leadership & Planning.
ISO37301-05	Organizational roles and responsibilities	Organizational roles and responsibilities. Control from ISO 37301 framework, domain: ISO 37301: Leadership & Planning.
ISO37301-CL4.4	Cl. 4.4 Compliance obligations - determining and maintaining specific compliance obligations applicable to the organization	-

ISO 37301: Operational Controls

5 controls

Quality controls in operations (ISO 37301)

Controls in the ISO 37301: Operational Controls domain of ISO 37301: 5 controls
Code	Title	Description
ISO37301-06	Operational planning and control	Operational planning and control. Control from ISO 37301 framework, domain: ISO 37301: Operational Controls.
ISO37301-07	Requirements for products and services	Requirements for products and services. Control from ISO 37301 framework, domain: ISO 37301: Operational Controls.
ISO37301-08	Design and development controls	Design and development controls. Control from ISO 37301 framework, domain: ISO 37301: Operational Controls.
ISO37301-09	Control of externally provided processes	Control of externally provided processes. Control from ISO 37301 framework, domain: ISO 37301: Operational Controls.
ISO37301-10	Production and service provision controls	Production and service provision controls. Control from ISO 37301 framework, domain: ISO 37301: Operational Controls.

ISO 37301: Performance Evaluation

5 controls

Measuring and evaluating quality performance (ISO 37301)

Controls in the ISO 37301: Performance Evaluation domain of ISO 37301: 5 controls
Code	Title	Description
ISO37301-11	Monitoring, measurement, and analysis	Monitoring, measurement, and analysis. Control from ISO 37301 framework, domain: ISO 37301: Performance Evaluation.
ISO37301-12	Internal audit program	Internal audit program. Control from ISO 37301 framework, domain: ISO 37301: Performance Evaluation.
ISO37301-13	Management review process	Management review process. Control from ISO 37301 framework, domain: ISO 37301: Performance Evaluation.
ISO37301-14	Customer satisfaction measurement	Customer satisfaction measurement. Control from ISO 37301 framework, domain: ISO 37301: Performance Evaluation.
ISO37301-15	Nonconformity and corrective action	Nonconformity and corrective action. Control from ISO 37301 framework, domain: ISO 37301: Performance Evaluation.

Improvement

2 controls

Controls in the Improvement domain of ISO 37301: 2 controls
Code	Title	Description
ISO37301-10.1	Nonconformity and Corrective Action	React to nonconformities including breaches, determine causes, and implement corrective actions.
ISO37301-10.2	Continual Improvement	Continually improve the suitability, adequacy, and effectiveness of the CMS.

Leadership

1 controls

Controls in the Leadership domain of ISO 37301: 1 controls
Code	Title	Description
ISO37301-5.1	Leadership and Commitment	Top management and governing body demonstrate leadership and commitment to the CMS.

Obligations

1 controls

Controls in the Obligations domain of ISO 37301: 1 controls
Code	Title	Description
ISO37301-4.5	Compliance Obligations	Identify, document, evaluate, and maintain compliance obligations applicable to the organization.

Operations

4 controls

Controls in the Operations domain of ISO 37301: 4 controls
Code	Title	Description
ISO37301-8.1	Operational Planning and Control	Establish controls to meet compliance obligations and address risks.
ISO37301-8.2	Establishing Controls and Procedures	Implement controls and procedures proportionate to compliance risk.
ISO37301-8.3	Raising Concerns	Establish, implement, and maintain processes for workers and others to raise concerns confidentially without retaliation...
ISO37301-8.4	Investigation Processes	Investigate reports of suspected or actual non-compliance fairly and consistently.

Performance

4 controls

Controls in the Performance domain of ISO 37301: 4 controls
Code	Title	Description
ISO37301-9.1.1	Monitoring, Measurement, Analysis, and Evaluation	Monitor and measure compliance performance using defined indicators.
ISO37301-9.1.5	Reporting	Provide reports on compliance performance to relevant interested parties including the governing body.
ISO37301-9.2	Internal Audit	Conduct internal audits of the CMS at planned intervals.
ISO37301-9.3	Management Review	Top management reviews the CMS at planned intervals to ensure suitability, adequacy, and effectiveness.

Planning

2 controls

Controls in the Planning domain of ISO 37301: 2 controls
Code	Title	Description
ISO37301-6.1	Actions to Address Risks and Opportunities	Plan actions to address compliance risks and opportunities and integrate them into processes.
ISO37301-6.2	Compliance Objectives and Planning	Establish measurable compliance objectives at relevant functions and levels and plan to achieve them.

Policy

1 controls

Controls in the Policy domain of ISO 37301: 1 controls
Code	Title	Description
ISO37301-5.2	Compliance Policy	Establish, communicate, and maintain a compliance policy appropriate to the organization.

Risk

1 controls

Controls in the Risk domain of ISO 37301: 1 controls
Code	Title	Description
ISO37301-4.6	Compliance Risk Assessment	Identify and analyze compliance risks linked to obligations and evaluate them.

Roles

2 controls

Controls in the Roles domain of ISO 37301: 2 controls
Code	Title	Description
ISO37301-5.3.2	Compliance Function	Establish a compliance function with appropriate authority, independence, resources, and access to top management.
ISO37301-5.3.3	Governance Body and Top Management Responsibilities	Governing body and top management have defined accountabilities for the CMS.

Support

4 controls

Controls in the Support domain of ISO 37301: 4 controls
Code	Title	Description
ISO37301-7.2	Competence	Determine and ensure necessary competence for persons affecting compliance performance.
ISO37301-7.3	Awareness and Training	Workers are aware of compliance policy, their contribution, and consequences of non-compliance.
ISO37301-7.4	Communication	Determine internal and external communications relevant to the CMS.
ISO37301-7.5	Documented Information	Create, update, and control documented information required by the CMS.

Your Compliance Coverage

If you comply with ISO 37301, you already cover:

ISO 37301:2021

42%

18 controls mapped

Compare →

ISO 27701:2019

35%

15 controls mapped

Compare →

ISO 9001:2015

35%

15 controls mapped

Compare →

+ 69 more: ISO 22301:2019 (33%), ISO 22000:2018 (30%)

See all 72 mapped frameworks ↓

Maps to 72 other frameworks

43 total controls

ISO 37301:2021

18 source controls mapped|17 target controls covered

42%

ISO 27701:2019

15 source controls mapped|12 target controls covered

35%

ISO 9001:2015

15 source controls mapped|16 target controls covered

35%

ISO 22301:2019

14 source controls mapped|11 target controls covered

33%

ISO 22000:2018

13 source controls mapped|12 target controls covered

30%

ISO 55001:2014

12 source controls mapped|9 target controls covered

28%

ISO 37001:2016

12 source controls mapped|9 target controls covered

28%

ISO 14001:2015

12 source controls mapped|10 target controls covered

28%

ISO 50001:2018 - Energy Management Systems

10 source controls mapped|8 target controls covered

23%

ISO 45001:2018

8 source controls mapped|7 target controls covered

19%

ISO 27005:2022

6 source controls mapped|7 target controls covered

14%

ISO 14004:2016

6 source controls mapped|6 target controls covered

14%

ISO 31000:2018

4 source controls mapped|4 target controls covered

ISO/IEC 23894:2023

4 source controls mapped|9 target controls covered

ISO/IEC 17025:2017 - General Requirements for Testing and Calibration

3 source controls mapped|5 target controls covered

ISO 13485:2016

2 source controls mapped|2 target controls covered

ISO/IEC 42001:2023

2 source controls mapped|2 target controls covered

ICH Q10 - Pharmaceutical Quality System

2 source controls mapped|1 target controls covered

IEC 62304:2015 Medical Device Software Lifecycle Processes

2 source controls mapped|4 target controls covered

ISO 30401

2 source controls mapped|2 target controls covered

TISAX - Trusted Information Security Assessment Exchange

2 source controls mapped|2 target controls covered

ISO 10005:2005

2 source controls mapped|2 target controls covered

ISO 27018:2019