ISO 19600 – Corporate compliance

Compliance to enhance reputation

The regulatory environment is becoming increasingly complex and extensive. Furthermore, the authorities are monitoring compliance more closely than ever. The ISO 19600 standard for corporate compliance management provides:

  • Transparency. Corporate compliance ensures that legal and client requirements are met. It involves transparency, linked to social responsibility through good governance based on ESG principles that incorporate ethical and legal requirements. It establishes mechanisms for the prevention, management, training, detection, minimisation and control of compliance-related risks.
  • It enhances reputation through transparency, improves adherence to the marketing plan and reduces the risk of losing business due to unenforceable contracts or exclusion from tenders or grants.
  • It minimises the risk of fines and penalties linked to legal non-compliance. The company will be prepared for an unannounced inspection and it helps demonstrate its commitment to prevention.
  • Applicable to all types of organisations and ISO certificates such as ISO 9001 for quality management, ISO 27001 for information security, ISO 22301 for business continuity planning, ISO 14001 for environmental management and ISO 45001 for occupational health and safety.

For further information, see Compliance, four basic tips – La Vanguardia

ISO 19600 requirements on corporate compliance

Corporate compliance, in accordance with the requirements of ISO 19600, takes the following elements into account:

  • Management and leadership of the corporate compliance programme in line with the corporate culture.
  • Communication is essential to ensure that employees are committed to professional ethics.
  • Organisational structure. The management system must be led by a compliance officer who has direct access to senior management.
  • Risk assessments. The ISO 19600 standard requires the identification and assessment of risks and opportunities, as well as the establishment of monitoring and control procedures through corporate compliance programmes.
  • General standards. The starting point is the code of conduct and good governance. The organisation should consider embedding its ethical values across all areas of operation through procedures and standards. These can be incorporated into its integrated management system.
  • Internal controls to ensure compliance with compliance policies. We highlight the whistleblowing channel for identifying and preventing undesirable conduct.
  • Training and communication. You must establish training initiatives to ensure that employees understand what is expected of them. Communication regarding professional ethical conduct and compliance must be ongoing, until it becomes a distinguishing feature of the corporate culture.
  • Monitoring and auditing. Internal auditing to ensure the implementation of protocols is key to corporate compliance under ISO 19600. Furthermore, certification can be obtained through an accredited ISO certification body.
  • Investigations and corrective actions. It is far more efficient to prevent problems through an internal investigation and attempt to resolve them before they become public knowledge. This would otherwise result in reputational damage.

A Corporate Compliance programme can be relevant in assessing the company’s liability.

Strategic Corporate Compliance Consultancy

As an ISO management systems consultancy, we provide comprehensive corporate compliance services, tailored to your needs:

ISO 19600 Corporate Compliance Certification

ISO 19600 certification to validate your effective and flexible ISO 19600 compliance management system. We know how to integrate it into your ISO 9001 quality management system, ISO 14001 environmental management system or ISO 45001 occupational health and safety management system. We use the ‘Gesttic’ methodology, based on Microsoft 365, to maintain constant contact with the client.

Internal ISO audit focusing on good governance, corporate social responsibility and corporate compliance in accordance with the requirements of ISO 19600. We conduct an integrated audit covering ISO 9001, ISO 27001, ISO 14001, ISO 45001 and CSR.

ISO outsourcing to maintain your ISO 19600 certification on ‘Corporate Compliance’, taking on the role of System Manager. We have the expertise to maintain a certification that integrates quality management, environmental management, safety and social responsibility.

ISO training courses tailored to your needs. In-company training at your premises, online training via our training platform, or blended learning.

Our corporate compliance services are backed by over 25 years of success.