GLOBAL

Loading

Global Energy Up is an independent certification body for management systems and a validation and verification body for greenhouse-gas information. We audit and decide; we do not consult.

Compliance management

ISO 37301:2021
Compliance management

Obligations that live in individual heads become gaps when people move.

ISO 37301 certification demonstrates that an organization identifies its compliance obligations, assesses compliance risk and embeds compliance in its culture, with a compliance function that has independence and access to the governing body.

Who it is for. Financial institutions, listed companies, government-related entities, healthcare, and organizations in regulated or high-exposure sectors.

  • Identification of compliance obligations and compliance risk assessment
  • Governing body and top management oversight
  • Independence and authority of the compliance function
  • Compliance culture, training and communication
  • Raising concerns and investigation processes
  • Monitoring, reporting and handling of noncompliance

Each area above is assessed on objective evidence — records, interviews and direct observation of work.

How the audit runs

Audit time is determined on the basis of ISO/IEC 17021-1:2015 clause 9.1.4 and the audit-time rules applicable to the scheme. Remote auditing never reduces the required audit time.

01.
Stage 1

Review of documentation, readiness and scope, and planning of Stage 2.

02.
Stage 2

On-site evaluation of implementation and effectiveness; findings are recorded.

03.
Decision & surveillance

An independent decision, then annual surveillance through the three-year cycle.

Edition and transition

Audits are conducted against ISO 37301:2021 including Amendment 1:2024 on climate-change considerations.

Auditing with other standards

Where the system is integrated with others, the standards can be audited together in one visit; duration is calculated for each standard and then adjusted for the actual degree of integration.

  • What do I need to apply?
    Legal name, sites, scope of activities, headcount and shift pattern, outsourced processes, any existing certificate, and whether you received consultancy on the system and from whom.
  • Why do you ask about consultancy?
    Because we do not certify a system on which a body related to us provided consultancy, and every application is screened for conflicts of interest before it is accepted.
  • Will the certificate carry an accreditation mark?
    Not before accreditation is granted. Certificates are currently issued without an accreditation mark.

Start with a
written application.