The establishment, implementation, maintenance, evaluation and continual improvement of a best practice compliance management system is a key element of a diligent management of any organization. For businesses, best practice compliance management creates a competitive advantage and for public organizations it is at the heart of good public governance. ISO Standard 19600 – Compliance management systems is the first international standard on best practice systematic compliance management.

Based on leadership, values and culture, following a principles-based approach and in application of the well-established plan-do-check-act iterative management process, the Standard describes in a clear and easy to understand language what organizations should do to effectively assess and treat compliance risks. This guidance is intended to be adaptable and can be of use for any kind of organization or part thereof and with regard to any kind of compliance risk, irrespective of the size of the organization. It is also adaptable to the level of maturity of an organization’s compliance management system and to the context, nature and complexity of the organization’s activities.

This commentary – elaborated by international compliance experts and members of the ISO Project Committee that developed the Standard – is intended to assist Board Members, Management at all levels and Compliance Officers in reducing complexity and the related costs of their compliance management whilst increasing its effectiveness and transparency. Ultimately, best practice compliance management avoids and mitigates compliance risks and creates the basis for the long-term success of organizations and their Board Members, Managers and Employees.