Your Business Sustainability Partner

ISO 1 9600 : 2015 Compliance management systems - Guidelines

The Board of Directors as guarantor of the legal and compliance function

Ther are bound to be  differences in approach and departmental objectives, management solutions applied to meet (compliance) requirements will differ; there is therefore a potential overlap of concerns, more often aided by conflict of interest  or a risk that matters might become worse to the organizational compliance.

Debate amongst various politicians and legislators has increasingly focussed on ethical aspects of business conduct, meaning that directing the attitude of people and creating the right culture is more important.
 
Legal and compliance is ultimately the Board’s responsibility and therefore increasing number of organizations start to adopt a robust "Compliance Management System" co-ordinated by a Chief Compliance Officer.

Origin of ISO 19600

 
In 2012, Australia proposed to start the development of an ISO standard for compliance programs based on the national Australian standard AS 8306. This proposal was accepted by the members of ISO and a Project Committee (PC) was established to develop the standard. ISO/PC 271 “Compliance Management” is chaired by Martin Tolar, president of the Australasian Compliance Institute and the secretariat is provided by the Australian standards body SAI. 
 
After two meetings of this ISO Committee the Draft International Standard ISO 19600 “Compliance management systems - Guidelines” has been published for voting and comments by the members of ISO.
 
AS 3806-2006 is superseded by ISO 19600 : 2015

COMPLIANCE MANAGEMENT

 
 Key Compliance Requirements in Software Industries (US Specific)
 
Sarbanes Oxley Act - Definig Processes, documentation of all business activities, mapping and identifying risks and controls
 
Gramm Liech Bliley Act  - Outsourcing service providers to Financial Institution
 
Health Insurance Portability & Accountability Act - HIPAA - Administrative simplification, Unique Health Identifiers, Privacy & Security
 
Data Protection Act (DPA) UK - When a business uses an outsourced entity to process personal information on its behalf, it retains liability for the security and accuracy of information and full control over how it is used

 Terms and Definitions

 

compliance ‘management system’

a set of interrelated or interacting elements of an organisation to establish policies and objectives and processes to achieve those objectives

compliance

meeting all the organisation’s compliance obligations

compliance obligations

Requirement or commitments that an organisation has to or chooses to comply with;

compliance risk

effect of uncertainty on compliance objectives

‘legal and regulatory’ obligations

concept of compliance is much more expansive and extends to obligations such as those set out in an organisation’s standard operating procedures

  • legal and regulatory
  • organisational (including obligations arising from policies and procedures as well as risk treatments); and
  • contractual

Search site

E-Qual receives appreciation from TI Group

-------------------------------------------------
 

E-Qual receives appreciation from  Mahindra & Mahindra

for knowledge support in implementing Energy Management System to ISO 50001: 2018 

-------------------------------------------------

"We are extremely delighted to have your consultancy for the successful completion of the process

 

Thank You for all your support and guidance"

 

Regards,

 

MRV Infra Management

E-Qual receives appreciation from Salcomp

We are extremely appreciative of the efforts of Management Consultants  E-Qual. 
 
As implementing partner of Assist, they developed skills,  20 QEHS Champions (Quality, Environmental, Health and Safety ) in our supply chain and bringingout  an excellent QEHS implementation handbook for continued guidance in their day to day implimentation
 
Managing Director

Log-in : "My E-Qual"  Gateway


 

Sustainable Practices...... Sustainable future.......

Make a website for freeWebnode