Back to Frameworks

ISO 37000:2021

International
v2021
5 domains
21 controls

ISO 37000:2021 Governance of Organizations — Guidance. Provides guidance on the governance of organizations, establishing principles and key aspects of practice to help governing bodies and other stakeholders. Applicable to all organizations regardless of type, size, or sector. Focuses on purpose, value generation, strategy, oversight, and accountability.

Verified

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (5)

Governance Foundations

5 controls

Principles and structures that form the foundation of effective organizational governance.

Controls in the Governance Foundations domain of ISO 37000:20215 controls
CodeTitle
ISO37000-GF-01Cl. 6.9 Ethical behavior — Acting with integrity, honesty, equity, and social responsibility
ISO37000-GF-02Cl. 6.5 Accountability — Being answerable for decisions and actions to stakeholders
ISO37000-GF-03Cl. 6.7 Transparency — Disclosing information to enable informed decision-making by stakeholders
ISO37000-GF-04Cl. 5 Rule of law — Compliance with applicable laws, regulations, and governance codes
ISO37000-GF-05Cl. 6.6 Stakeholder rights — Respecting and protecting stakeholder rights across governance decisions

Organizational Culture and Capability

4 controls

Fostering a culture that supports purpose achievement and building organizational capability.

Controls in the Organizational Culture and Capability domain of ISO 37000:20214 controls
CodeTitle
ISO37000-CC-01Cl. 5.2 Governance culture — Tone at the top promoting integrity, accountability, and transparency
ISO37000-CC-02Cl. 7.6 Organizational resilience — Capacity to anticipate, respond to, and recover from disruptions
ISO37000-CC-03Cl. 4.3.2 Competence — Leadership development, succession planning, and talent management for governance
ISO37000-CC-04Cl. 6.8 Data and decisions — Data governance and information management for informed decision-making

Oversight and Assurance

4 controls

The governing body's oversight of management and organizational performance.

Controls in the Oversight and Assurance domain of ISO 37000:20214 controls
CodeTitle
ISO37000-OA-01Cl. 4.3 Governing body — Composition, independence, competence, and commitment of the governing body
ISO37000-OA-02Cl. 4.2.2 Delegation — Clear mandates with accountability for delegated oversight of management
ISO37000-OA-03Cl. 6.4 Oversight — Internal control and assurance systems for managing risks and ensuring compliance
ISO37000-OA-04Cl. 7.5 Monitoring and evaluation — Regular review of governance effectiveness and performance

Purpose and Value Generation

4 controls

Establishing and pursuing the organization's purpose to generate value for the organization and its stakeholders over time.

Controls in the Purpose and Value Generation domain of ISO 37000:20214 controls
CodeTitle
ISO37000-PV-01Cl. 6.1 Purpose — Defining organizational purpose aligned with stakeholder expectations
ISO37000-PV-02Cl. 6.2 Value generation — Creating and preserving value for the organization and stakeholders over time
ISO37000-PV-03Cl. 6.6 Stakeholder engagement — Understanding and responding to stakeholder interests and expectations
ISO37000-PV-04Cl. 6.10 Social responsibility — Integrating economic, social, and environmental considerations into governance

Strategy and Direction

4 controls

Setting organizational strategy and direction aligned with purpose, managing risks and opportunities.

Controls in the Strategy and Direction domain of ISO 37000:20214 controls
CodeTitle
ISO37000-SD-01Cl. 6.3 Strategy — Formulating strategy aligned with organizational purpose and stakeholder expectations
ISO37000-SD-02Cl. 7.3 Risk governance — Identifying and managing risks to strategic objectives through risk-based thinking
ISO37000-SD-03Cl. 7.4 Resource governance — Ensuring resources are deployed to achieve strategic priorities and generate value
ISO37000-SD-04Cl. 6.11 Viability and performance — Setting measurable objectives and monitoring outcomes for sustained performance

Maps to 21 other frameworks

21 total controls
NHS Healthcare Leadership Model
10 source controls mapped|10 target controls covered
48%
Goleman Emotional Intelligence Leadership Framework
10 source controls mapped|9 target controls covered
48%
ICN Leadership for Change Programme
9 source controls mapped|10 target controls covered
43%
Heifetz Adaptive Leadership Framework
9 source controls mapped|8 target controls covered
43%
The Leadership Challenge (Kouzes & Posner)
8 source controls mapped|8 target controls covered
38%
WHO Global Competency Model
6 source controls mapped|6 target controls covered
29%
OECD/G20 Principles of Corporate Governance
6 source controls mapped|8 target controls covered
29%
Full Range Leadership Model (Bass & Avolio)
6 source controls mapped|6 target controls covered
29%
Maslach Burnout Prevention Model
5 source controls mapped|5 target controls covered
24%
Argyris Double-Loop Learning
5 source controls mapped|6 target controls covered
24%
COSO Internal Control — Integrated Framework (2013)
5 source controls mapped|3 target controls covered
24%
Hersey & Blanchard Situational Leadership Model
4 source controls mapped|4 target controls covered
19%
Senge Fifth Discipline — Learning Organization
4 source controls mapped|5 target controls covered
19%
ILO Nursing Personnel Convention C149 (1977)
4 source controls mapped|4 target controls covered
19%
Kotter 8-Step Change Model
4 source controls mapped|3 target controls covered
19%
SSAE 18 SOC 1 — Report on Controls at a Service Organisation (ICFR)
3 source controls mapped|2 target controls covered
14%
VUCA Leadership Framework
3 source controls mapped|4 target controls covered
14%
Kolb Experiential Learning Cycle
2 source controls mapped|2 target controls covered
10%
ASEAN Data Management Framework
2 source controls mapped|1 target controls covered
10%
Voluntary Principles on Security and Human Rights (VPs)
2 source controls mapped|1 target controls covered
10%
US OFAC Sanctions Compliance Framework
2 source controls mapped|1 target controls covered
10%

Frequently Asked Questions

What is ISO 37000:2021?

ISO 37000:2021 is a compliance framework from International with 5 domains and 21 controls. ISO 37000:2021 Governance of Organizations — Guidance. Provides guidance on the governance of organizations, establishing principles and key aspects of practice to help governing bodies and other stakeholders. Applicable to all organizations regardless of type, size, or sector. Focuses on purpose, value generation, strategy, oversight, and accountability. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

How many controls does ISO 37000:2021 have?

ISO 37000:2021 has 21 controls organised across 5 domains. The largest domains are Governance Foundations (5 controls), Organizational Culture and Capability (4 controls), Oversight and Assurance (4 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

What frameworks does ISO 37000:2021 map to?

ISO 37000:2021 maps to 21 other compliance frameworks. The top mapping partners are NHS Healthcare Leadership Model (48% coverage), Goleman Emotional Intelligence Leadership Framework (48% coverage), ICN Leadership for Change Programme (43% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I get started with ISO 37000:2021 compliance?

Start your ISO 37000:2021 compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about ISO 37000:2021 requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 21 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 692 frameworks.

Get Started Free →

Free forever — no credit card required