International

ISO 37302:2025

39 controls. 0 other frameworks in our corpus share controls with it. Here is all of it, and how much of it you are already doing.

Page built . This page is derived from the framework corpus, which changes when the corpus is extended rather than daily.

39 controls 0 frameworks share controls with it International verified against its source document

Every control below is one this framework asks for. The right hand column counts how many other frameworks in our corpus carry the same control, which is the difference between doing this work once and doing it again for the next standard.

There is no implementation kit for this framework yet. The control list and the overlap above are free and complete.

What you already have

Frameworks whose controls overlap this one, most first. If you run any of them, the count is roughly what you have already evidenced.

No measured overlap with another framework in the corpus.

Every control

CodeControlAlso in
2-3Normative references and terms0
4General principles: objectivity, completeness and scalability, traceability0
5.1Evaluation methodology: effectiveness, three dimensions, one framework0
5.2Evaluation scales: five levels on three dimensions (Table 1)0
5.3Evaluation indicator framework (Table 2)0
6.1Planning and establishment of the compliance management system0
6.1.1Analysis of the context of the organization, including requirements of interested parties0
6.1.2Identification and update of compliance obligations0
6.1.3Determination of the scope of the compliance management system and assessment of compliance risk0
6.1.4Leadership and commitment of the governing body and top management0
6.1.5Implementation of compliance governance principles0
6.1.6Maintenance and promotion of compliance culture0
6.1.7Assignment of roles, responsibilities and authorities for personnel at different levels0
6.1.8Compliance policy and setting of objectives0
6.1.9Planning of actions to address risks and opportunities and the resources required0
6.2Implementation of the planned compliance management system0
6.2.1Operational actions to address risks and opportunities0
6.2.2Allocation of resources0
6.2.3Competences, capacity building and raising awareness0
6.2.4Employment process, rewards and disciplinary actions0
6.2.5Training0
6.2.6Internal and external communication0
6.2.7Establishment of a mechanism for raising concerns0
6.2.8Implementation of processes for investigation0
6.2.9Management of documented information0
6.3Evaluating performance and improvement of the compliance management system0
6.3.1Monitoring, measurement, analysis and evaluation of performance0
6.3.2Internal audit0
6.3.3Management review0
6.3.4Actions to address nonconformity and/or noncompliance and correction0
6.3.5Continual improvement in a planned manner0
7.1Objectives of the evaluation0
7.2Structured approach0
7.3Evaluators0
7.4Evaluation method0
7.4.1Design of the evaluation0
7.4.2Implementation of the evaluation0
7.4.3Reporting and response0
AAnnex A (informative): figure of the evaluation indicator framework0

Tell me when ISO 37302:2025 files something new

One email when a public company newly discloses something this framework governs, naming the company and what our corpus says it puts in scope. Nothing else, and one click to stop.

What an auditor will ask you to produce

The artefacts named on the failure modes this framework speaks to.

  • Investigation procedure
  • Case files
  • Closure reports
  • Corrective action records
  • Management system documentation and records
  • Internal audit and management review records covering AIMS certification
  • Competence requirements for roles affecting compliance
  • Evidence of competence per person
  • Effectiveness evaluation of competence actions
  • Competence requirements per role in the plan

How programmes fail on this

Failure modes named by this framework and others. Each opens the full record.

What this page is

A control-level reference for ISO 37302:2025, drawn from our framework corpus. Control codes and titles are references to the standard, not reproductions of it. The overlap counts and the auditor artefacts are our own work and are the part you will not find elsewhere.

Measure this against what you already run · All frameworks · Today's edition