Context and management commitment

Context of the organization

Identifying compliance obligations and the internal and external factors affecting noncompliance risk.

Top management commitment

Management leads on compliance, allocates resources and communicates its commitment visibly.

Compliance policy

A document setting the organization's commitment to compliance, serving as a reference for the rest of the system.

What an auditor usually asks for

• A register of identified compliance obligations
• Evidence of visible management leadership
• A documented, communicated compliance policy
• Resources allocated to the compliance system

How to cover context in Kimobox

1. 1Log compliance obligations as a living document in Kimobox.
2. 2Publish the compliance policy as a controlled document.
3. 3Document management's compliance leadership actions.

Where each figure comes from

References to the official text in force. If a standard is revised, this page is updated and the review date says so.

1. ISO 19600:2014 — Compliance management systems. Guidelines (withdrawn) ISO · Withdrawn
2. ISO 37301:2021 — Compliance management systems. Requirements ISO · April 2021