I am writing an article on the most common challenges to comply with the #ISO37301 for the IE Law School. What are the elements of your compliance management system that you plan to improve? #compliance

1. 10 mistakes in
implementing
the ISO 37301
and how to prevent them
Prof. Hernan Huwyler, MBA CPA

2. IE, top global MBAs

3. IE Tower in Madrid

4. The scope is limited to
few regulations and
criminal laws
covering multi-level processes
with high compliance risks
instead of
1

5. Information
systems
Social
responsibility
Supply chain
Energy
Food
Scope
1 Corruption
Fraud
Quality
Environmental
Health & safety
Criminal law

6. The compliance risks
are assessed using
adjectives
applying scientific quantitative
techniques such as decision trees,
Monte Carlo Simulations and
scenario planning
instead of
2

7. The use of biased
and superficial risk
analysis with colors
and arbitrary scores
prevents corporate
defense
2

8. This is not risk
management
2
but just a
popular malpractice

9. The controls are
assumed
implemented
testing the design and efficiency of
compliance controls before and
during the implementation
instead of
3

10. The register of
compliance obligations is
at a high level
mapping specific laws,
requirements and clauses to
compliance controls
instead of
4

11. The knowledge is not
transmitted from
implementation leads
training risks and controls owners
on the ISO 37301 requirements
instead of
5

12. The certification is
expected to be a
liability waiver
understanding the value of the ISO
as a benchmark to build trust
instead of
6

13. The procedures are
copied from generic
models
building a consensus on the
target operative model adjusted
to the context
instead of
7

14. The recovery of the
investment is not
measured
creating indicators as part of a
compliance-as-a-service strategy
instead of
8

15. The indicators are
not used for data-
driven decisions
acting on the impact of customer
complaints, compensations,
disputes, fraud and loses
instead of
9

16. The contingency
protocols are
superficial
improving the resolution actions
to protect the trust from
stakeholders
instead of
10

17. Global online and
blended programs
in compliance for
managers and
advisors