ISO 37000:2021

International

v2021

11 domains

59 controls

ISO 37000:2021 Governance of Organizations - Guidance. Provides guidance on the governance of organizations, establishing principles and key aspects of practice to help governing bodies and other stakeholders. Applicable to all organizations regardless of type, size, or sector. Focuses on purpose, value generation, strategy, oversight, and accountability.

Unverified

Framework summaries on this platform are AI-assisted interpretations for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (11)

Enabling

8 controls

Controls in the Enabling domain of ISO 37000:2021 — 8 controls
Code	Title	Description
GOV-ACCOUNT	Accountability Mechanisms	Establish clear accountability across governing body, executive, and operational layers with documented authorities.
GOV-DATA	Data Informed Decisions	Use accurate, reliable, and relevant data to inform governance decisions with documented decision trails.
GOV-LEAD	Ethical Leadership	Demonstrate ethical leadership and tone from the top that drives values-based behaviour throughout the organization.
GOV-OVERSIGHT	Governing Body Oversight	Provide structured oversight of management execution, performance, and risk by the governing body.
GOV-RISK	Risk Appetite and Tolerance	Establish risk appetite and tolerance aligned with strategy and oversee risk holistically.
GOV-SOCIAL	Social Responsibility Integration	Integrate social, environmental, and economic responsibilities into governance and decisions.
GOV-STAKE	Stakeholder Identification and Engagement	Identify, prioritize, and engage stakeholders to inform decisions and maintain legitimacy.
GOV-VIABLE	Long-Term Viability	Govern for long-term viability including financial, operational, and reputational resilience.

Enabling Principles

8 controls

Controls in the Enabling Principles domain of ISO 37000:2021 — 8 controls
Code	Title	Description
ISO37000-5.1	Oversight	Governing body exercises effective oversight over management's execution of strategy, risk, and performance.
ISO37000-5.2	Accountability	Establish clear accountability for decisions, actions, and outcomes at governing body, management, and operational level...
ISO37000-5.3	Stakeholder Engagement	Identify, prioritize, and engage stakeholders to inform governance decisions and maintain trust.
ISO37000-5.4	Leadership	Demonstrate ethical leadership and tone from the top that reflects organizational values and purpose.
ISO37000-5.5	Data and Decisions	Base governance decisions on accurate, timely, and relevant data with documented decision processes.
ISO37000-5.6	Risk Governance	Govern risk holistically including risk appetite, tolerance, and integration with strategy execution.
ISO37000-5.7	Social Responsibility	Account for social, environmental, and economic impacts in governance decisions consistent with sustainable development.
ISO37000-5.8	Viability and Performance	Govern for long-term viability balancing performance, resilience, and adaptability over time.

Foundational

3 controls

Controls in the Foundational domain of ISO 37000:2021 — 3 controls
Code	Title	Description
GOV-PURPOSE	Organizational Purpose	Articulate a clear purpose that anchors governance choices and explains why the organization exists for stakeholders.
GOV-STRATEGY	Strategy Setting and Review	Set, approve, and periodically review strategy that translates purpose into measurable objectives and resource decisions...
GOV-VALUE	Value Generation Across Horizons	Generate and protect value for the organization and stakeholders over short, medium, and long-term time frames.

Foundational Principles

3 controls

Controls in the Foundational Principles domain of ISO 37000:2021 — 3 controls
Code	Title	Description
ISO37000-4.1	Purpose	Define and articulate the organization's purpose as the primary driver of governance decisions and value generation for...
ISO37000-4.2	Value Generation	Generate value for the organization and its stakeholders over short, medium, and long-term horizons through sustainable...
ISO37000-4.3	Strategy	Establish strategy that operationalizes purpose, allocates resources, and addresses risks and opportunities across time...

Governance Foundations

5 controls

Principles and structures that form the foundation of effective organizational governance.

Controls in the Governance Foundations domain of ISO 37000:2021 — 5 controls
Code	Title	Description
ISO37000-GF-01	Cl. 6.9 Ethical behavior - Acting with integrity, honesty, equity, and social responsibility	Ethical behavior - acting with integrity, honesty, equity, and social responsibility. Control from ISO 37000:2021 framew...
ISO37000-GF-02	Cl. 6.5 Accountability - Being answerable for decisions and actions to stakeholders	Accountability - being answerable for decisions and actions to stakeholders. Control from ISO 37000:2021 framework, doma...
ISO37000-GF-03	Cl. 6.7 Transparency - Disclosing information to enable informed decision-making by stakeholders	Transparency - disclosing information to enable informed decision-making by stakeholders. Control from ISO 37000:2021 fr...
ISO37000-GF-04	Cl. 5 Rule of law - Compliance with applicable laws, regulations, and governance codes	Rule of law - compliance with laws, regulations, and governance codes. Control from ISO 37000:2021 framework, domain: Go...
ISO37000-GF-05	Cl. 6.6 Stakeholder rights - Respecting and protecting stakeholder rights across governance decisions	Rights of stakeholders - respecting and protecting stakeholder rights. Control from ISO 37000:2021 framework, domain: Go...

Operational

12 controls

Controls in the Operational domain of ISO 37000:2021 — 12 controls
Code	Title	Description
GOV-ASSURE	Assurance Arrangements	Obtain independent assurance over governance, risk, controls, and reported information through combined assurance.
GOV-COI	Conflicts of Interest	Identify, declare, and manage conflicts of interest with transparent recusal and decisioning.
GOV-COMP	Governing Body Composition	Maintain a governing body with appropriate skills, independence, diversity, and tenure for current and future needs.
GOV-EVAL	Governing Body Evaluation	Evaluate governing body and committee performance to drive continuous improvement.
GOV-REM	Remuneration Governance	Govern executive and board remuneration aligned to purpose, strategy, performance, and stakeholder expectations.
GOV-REPORT	Reporting and Transparency	Provide balanced, transparent, and timely reporting on performance, prospects, and governance to stakeholders.
ISO37000-6.1	Governance Body Composition	Compose governing body with appropriate skills, independence, diversity, and capacity to discharge duties.
ISO37000-6.2	Governing Body Effectiveness	Evaluate and continuously improve governing body effectiveness through structured reviews and development.
ISO37000-6.3	Conflict of Interest	Identify, disclose, and manage conflicts of interest at all governance levels.
ISO37000-6.4	Remuneration	Govern remuneration to align with purpose, strategy, performance, and stakeholder interests over appropriate horizons.
ISO37000-6.5	Assurance	Obtain independent assurance over governance arrangements, controls, and reported information.
ISO37000-6.6	Reporting and Transparency	Provide transparent, balanced, and timely reporting on governance, performance, and prospects to stakeholders.

Organizational Culture and Capability

4 controls

Fostering a culture that supports purpose achievement and building organizational capability.

Controls in the Organizational Culture and Capability domain of ISO 37000:2021 — 4 controls
Code	Title	Description
ISO37000-CC-01	Cl. 5.2 Governance culture - Tone at the top promoting integrity, accountability, and transparency	Governance culture - tone at the top promoting integrity, accountability, and trust. Control from ISO 37000:2021 framewo...
ISO37000-CC-02	Cl. 7.6 Organizational resilience - Capacity to anticipate, respond to, and recover from disruptions	Organizational resilience - capacity to anticipate, respond to, and recover from disruptions. Control from ISO 37000:202...
ISO37000-CC-03	Cl. 4.3.2 Competence - Leadership development, succession planning, and talent management for governance	Human governance - leadership development, succession, and talent management. Control from ISO 37000:2021 framework, dom...
ISO37000-CC-04	Cl. 6.8 Data and decisions - Data governance and information management for informed decision-making	Data governance and information management for informed decision-making. Control from ISO 37000:2021 framework, domain:...

Oversight and Assurance

4 controls

The governing body's oversight of management and organizational performance.

Controls in the Oversight and Assurance domain of ISO 37000:2021 — 4 controls
Code	Title	Description
ISO37000-OA-01	Cl. 4.3 Governing body - Composition, independence, competence, and commitment of the governing body	Governing body effectiveness - composition, independence, competence, and commitment. Control from ISO 37000:2021 framew...
ISO37000-OA-02	Cl. 4.2.2 Delegation - Clear mandates with accountability for delegated oversight of management	Delegation and oversight of management - clear mandates with accountability. Control from ISO 37000:2021 framework, doma...
ISO37000-OA-03	Cl. 6.4 Oversight - Internal control and assurance systems for managing risks and ensuring compliance	Internal control and assurance - systems for managing risks and ensuring compliance. Control from ISO 37000:2021 framewo...
ISO37000-OA-04	Cl. 7.5 Monitoring and evaluation - Regular review of governance effectiveness and performance	Monitoring and evaluation - regular review of governance effectiveness. Control from ISO 37000:2021 framework, domain: O...

Performance

4 controls

Controls in the Performance domain of ISO 37000:2021 — 4 controls
Code	Title	Description
GOV-ADAPT	Adaptive Governance	Adapt governance arrangements in response to context changes, performance feedback, and emerging issues.
GOV-OUTCOME	Governance Outcomes Measurement	Measure governance outcomes including value, ethics, and stakeholder trust to drive accountability and improvement.
ISO37000-7.1	Governance Outcomes	Define, measure, and review governance outcomes to demonstrate value creation and continuous improvement.
ISO37000-7.2	Adapting Governance	Adapt governance arrangements in response to internal changes, external context, and lessons learned.

Purpose and Value Generation

4 controls

Establishing and pursuing the organization's purpose to generate value for the organization and its stakeholders over time.

Controls in the Purpose and Value Generation domain of ISO 37000:2021 — 4 controls
Code	Title	Description
ISO37000-PV-01	Cl. 6.1 Purpose - Defining organizational purpose aligned with stakeholder expectations	Defining organizational purpose aligned with stakeholder expectations. Control from ISO 37000:2021 framework, domain: Pu...
ISO37000-PV-02	Cl. 6.2 Value generation - Creating and preserving value for the organization and stakeholders over time	Value generation for the organization and stakeholders over time. Control from ISO 37000:2021 framework, domain: Purpose...
ISO37000-PV-03	Cl. 6.6 Stakeholder engagement - Understanding and responding to stakeholder interests and expectations	Stakeholder inclusiveness - understanding and responding to stakeholder interests. Control from ISO 37000:2021 framework...
ISO37000-PV-04	Cl. 6.10 Social responsibility - Integrating economic, social, and environmental considerations into governance	Sustainable development - integrating economic, social, and environmental considerations. Control from ISO 37000:2021 fr...

Strategy and Direction

4 controls

Setting organizational strategy and direction aligned with purpose, managing risks and opportunities.

Controls in the Strategy and Direction domain of ISO 37000:2021 — 4 controls
Code	Title	Description
ISO37000-SD-01	Cl. 6.3 Strategy - Formulating strategy aligned with organizational purpose and stakeholder expectations	Strategy formulation aligned with organizational purpose and stakeholder expectations. Control from ISO 37000:2021 frame...
ISO37000-SD-02	Cl. 7.3 Risk governance - Identifying and managing risks to strategic objectives through risk-based thinking	Risk-based thinking - identifying and managing risks to strategic objectives. Control from ISO 37000:2021 framework, dom...
ISO37000-SD-03	Cl. 7.4 Resource governance - Ensuring resources are deployed to achieve strategic priorities and generate value	Resource allocation - ensuring resources are deployed to achieve strategic priorities. Control from ISO 37000:2021 frame...
ISO37000-SD-04	Cl. 6.11 Viability and performance - Setting measurable objectives and monitoring outcomes for sustained performance	Performance-based governance - setting measurable objectives and monitoring outcomes. Control from ISO 37000:2021 framew...

Your Compliance Coverage

If you comply with ISO 37000:2021, you already cover:

NHS Healthcare Leadership Model

17%

10 controls mapped

Compare →

Goleman Emotional Intelligence Leadership Framework

17%

10 controls mapped

Compare →

ICN Leadership for Change Programme

15%

9 controls mapped

Compare →

+ 14 more: Heifetz Adaptive Leadership Framework (15%), The Leadership Challenge (Kouzes & Posner) (14%)

See all 17 mapped frameworks ↓

Maps to 17 other frameworks

59 total controls

NHS Healthcare Leadership Model

10 source controls mapped|10 target controls covered

17%

Goleman Emotional Intelligence Leadership Framework

10 source controls mapped|9 target controls covered

17%

ICN Leadership for Change Programme

9 source controls mapped|10 target controls covered

15%

Heifetz Adaptive Leadership Framework

9 source controls mapped|8 target controls covered

15%

The Leadership Challenge (Kouzes & Posner)

8 source controls mapped|8 target controls covered

14%

WHO Global Competency Model

6 source controls mapped|6 target controls covered

10%

OECD/G20 Principles of Corporate Governance

6 source controls mapped|8 target controls covered

10%

Full Range Leadership Model (Bass & Avolio)

6 source controls mapped|6 target controls covered

10%

Maslach Burnout Inventory (MBI) and Areas of Worklife Survey (AWS) Model

5 source controls mapped|5 target controls covered

Argyris Double-Loop Learning

5 source controls mapped|6 target controls covered

Hersey & Blanchard Situational Leadership Model

4 source controls mapped|4 target controls covered

Senge Fifth Discipline - Learning Organization

4 source controls mapped|5 target controls covered

ILO Nursing Personnel Convention C149 (1977)

4 source controls mapped|4 target controls covered

Kotter 8-Step Change Model

4 source controls mapped|3 target controls covered

COSO Internal Control - Integrated Framework (2013)

3 source controls mapped|2 target controls covered

VUCA Leadership Framework

3 source controls mapped|4 target controls covered

Kolb Experiential Learning Cycle

2 source controls mapped|2 target controls covered

Compare ISO 37000:2021 with NHS Healthcare Leadership Model

Frequently Asked Questions

What is ISO 37000:2021?

ISO 37000:2021 is a compliance framework from International with 11 domains and 59 controls. ISO 37000:2021 Governance of Organizations - Guidance. Provides guidance on the governance of organizations, establishing principles and key aspects of practice to help governing bodies and other stakeholders. Applicable to all organizations regardless of type, size, or sector. Focuses on purpose, value generation, strategy, oversight, and accountability. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

How many controls does ISO 37000:2021 have?

ISO 37000:2021 has 59 controls organised across 11 domains. The largest domains are Operational (12 controls), Enabling (8 controls), Enabling Principles (8 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

What frameworks does ISO 37000:2021 map to?

ISO 37000:2021 maps to 17 other compliance frameworks. The top mapping partners are NHS Healthcare Leadership Model (17% coverage), Goleman Emotional Intelligence Leadership Framework (17% coverage), ICN Leadership for Change Programme (15% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I get started with ISO 37000:2021 compliance?

Start your ISO 37000:2021 compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about ISO 37000:2021 requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 59 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 700 frameworks.

Get Started Free →

Free forever — no credit card required