Compliance today is no longer a back-office formality. In the face of increasingly complex regulatory landscapes and global supply chains, organizations need systems that embed integrity into everyday decision-making.

To meet this need, the International Organization for Standardization (ISO) published ISO 37301:2021^[1], the first certifiable Compliance Management System (CMS) standard, replacing the guidance-only ISO 19600. By shifting from recommendations to requirements, ISO 37301 enables independent, credible certification of how organizations design, implement, and continually improve their compliance programs.^[2]

Global Recognition through the IAF MLA

A turning point came in late 2024 when the International Accreditation Forum (IAF) extended its Multilateral Recognition Arrangement (MLA) to include Compliance Management Systems. ISO 37301:2021 was added as a Level 5 sub-scope, with ISO/IEC TS 17021-13:2021 (competence requirements for CMS auditors) included at Level 4.^[3]

This means that certification bodies accredited for ISO 37301 can now issue certificates  recognized internationally under the IAF MLA—reducing duplication, lowering oversight costs, and promoting “certified once, accepted often” as a practical reality.^[4]

Why It Matters for Latin America

In Latin America, governments and industries are intensifying efforts to strengthen governance, transparency, and anti-corruption frameworks.^[5] At the same time supply-chain partners and investors increasingly demand demonstrable compliance practices.

ISO 37301 provides a common framework to translate these expectations into policies, controls, training, monitoring, and continual improvement. When certification bodies are accredited for ISO 37301 under the IAF MLA, organizations can demonstrate—through internationally recognized certificates—that their compliance system has been audited competently and impartially. This bolsters market access, credibility of public-sector procurement, and stakeholder confidence in sectors such as infrastructure, energy, health and financial services.

The Central Role of Accreditation

Accreditation ensures that certification bodies are competent, impartial, and consistent. By assessing them against ISO/IEC 17021-1 and ISO/IEC TS 17021-13, accreditation bodies confirm that CMS auditors have the skills to evaluate core compliance elements such as risk assessment, third-party due diligence, investigations, remediation, and leadership commitment.

This oversight ensures that certificates issued under accreditation carry real weight. Through the IAF MLA, their acceptance is harmonized internationally—raising confidence for regulators, businesses, and citizens.^[6]

The Path Forward for Latin America

For Colombia and the region, ISO 37301 offers an opportunity to strengthen integrity while supporting competitiveness and integration into international markets. Accredited certification can  translate policy commitments into consistent practice, help reduce legal and reputational risk, and distinguish responsible enterprises.

What should come next?

• Expanding accredited  capacity: Encouraging certification bodies  to seek accreditation for ISO 37301 under the IAF MLA, widening access to competent auditors.
• Building coherence: Integrating ISO 37301 with related standards (for example, ISO 37001 on anti-bribery) to build  risk-based comprehensive compliance  systems .
• Strategic use by authorities: Regulators and procurement agencies can reference accredited ISO 37301 certification as credible evidence of governance maturity—without mandating it—thereby incentivizing voluntary adoption and continuous improvement.

Conclusion

ISO 37301, reinforced by accreditation and international recognition  through  the IAF MLA, offers Latin America—and Colombia—a practical tool to embed compliance into organizational culture. By turning compliance into a source of resilience, reputation, and competitiveness, the region can strengthen integrity while advancing its economic ambitions.

[1] ISO. ISO 37301:2021 — Compliance management systems — Requirements with guidance for use. Available at: https://www.iso.org/standard/75080.html

[2] ISO. ISO 19600:2014 — Compliance management systems — Guidelines (Withdrawn). Available at: https://www.iso.org/standard/62342.html

[3] International Accreditation Forum (IAF). IAF Extends MLA to include ABMS and CMS. News, 16 January 2025 (decision taken December 2024). Available at: https://iaf.nu/en/news/iaf-extends-mla-to-include-abms-and-cms/

[4] International Accreditation Forum (IAF). Changes in the Scope of the IAF MLA During 2024–2025.Available at: https://iaf.nu/en/changes-in-the-scope-of-the-iaf-mla-during-2024-2025/

[5] OECD. Government at a Glance: Latin America and the Caribbean 2024. Paris: OECD Publishing, 13 March 2024. Available at: https://www.oecd.org/en/publications/government-at-a-glance-latin-america-and-the-caribbean-2024_4abdba16-en.html

[6] International Accreditation Forum (IAF). IAF Extends MLA to include ABMS and CMS. News, 16 January 2025 (decision taken December 2024). Available at: https://iaf.nu/en/news/iaf-extends-mla-to-include-abms-and-cms/