ISO 37301 is the international standard for Compliance Management Systems (CMS), a certifiable standard that sets out how organisations should identify their compliance obligations (legal, regulatory, contractual and voluntary), embed a compliance culture, and manage compliance risk systematically. It builds on the earlier ISO 19600 guidance, now as a fully auditable, certifiable standard.
For South African businesses operating across multiple regulatory regimes (labour law, tax, sector-specific regulation, POPIA, B-BBEE and more), a compliance management system gives the board and executive team a single, structured view of what needs to be complied with, who owns it, and how breaches are prevented and handled.
Andreas Burger Consulting builds ISO 37301 systems on top of a sound risk management foundation (see ISO 31000), mapping your actual compliance obligations rather than applying a generic checklist.
After certification: a compliance obligations register and breach CAPA only work if they are kept up to date. DynamicERMS, built by our technology partner Dynatek, runs that compliance CAPA and document control day to day.