ISO 19600

ISO 19600:2014, Compliance management systems -- Guidelines, is a compliance standard introduced by the International Organization for Standardisation (ISO) in April 2014.

This standard was developed by ISO Project Committee ISO/PC 271 that was chaired by Martin Tolar. In recent times technical committee ISO/TC 309 has been created and the maintenance and future development of 19600 will be undertaken by members of this committee.

Origins

Standards Australia proposed a new ISO standard, based on the existing Australian standard "AS 3806 - Compliance Programs", which was issued in 1998 and updated in 2006. This standard is more widely used in the financial industry, being endorsed by Australian Prudential Regulation Authority and the Australian Securities and Investment Commission. The published version of ISO 19600:2014 is similar to AS 3806:2006 standard, and will replace it.[1]

The draft stage of ISO 19600 was completed in April 2014;[2] the final version was published on 5 December 2014.

Main requirements of the standard

The ISO 19600:2014 adopts the "ISO High Level Structure (HSL)" in 10 chapters in the following breakdown:

  • 1 Purpose
  • 2 Reference standards
  • 3 Terms and definitions
  • 4 organization Context
  • 5 Leadership
  • 6 Planning
  • 7 Support
  • 8 Operating Activities
  • 9 Performance Evaluation
  • 10 Improvement


Structure of the standard

ISO 19600 helps organizations establish, develop, evaluate, and maintain a compliance management system. It brings together separate standards of compliance management and risk management, and its processes align very closely with ISO 31000, another risk management standard.[3]

Many existing compliance standards focus on one specific regulatory requirement or topic area; ISO 19600 aims to unify these, so organizations can work within a single framework rather than several different ones focussing on different standards. Unlike PS 980, ISO does not mandate any specific auditing requirements.[4] ISO 19600 is "based on the principles of good governance, proportionality, transparency and sustainability".[5]

Like other related ISO standards, it emphasises the use of a Plan, Do, Check, Act (PDCA) cycle.

See also

References

  1. ↑ Tattam, David (2015). "Compliance Risk Management". Protecht Risk Management Insights. Retrieved 27 March 2015.
  2. ↑ "Austria: ISO 19600: compliance management systems — guidelines". TheLawyer.com. Retrieved 3 May 2015.
  3. ↑ Hortensius, Dick. "What Is The General Idea Behind The Proposed ISO 19600?". Ethic Intelligence. Retrieved 3 May 2015.
  4. ↑ "ISO 19600: Your questions, our answers". digital spirit. 2015. Retrieved 3 May 2015.
  5. ↑ "ISO 19600:2014: Compliance management systems -- Guidelines". ISO. Retrieved 3 May 2015.
  • ISO 19600—Compliance management systems -- Guidelines
  • ISO TC 309—Governance of organizations
This article is issued from Wikipedia. The text is licensed under Creative Commons - Attribution - Sharealike. Additional terms may apply for the media files.