What Is the Certificate?
ISO 37000 is a guidance document for the governance of organisations: it describes how the governing body should establish its purpose, values, oversight responsibility and accountability. It is not a requirements standard; no accredited certification is issued for it.
Who Needs It?
- Organisations establishing their board structure and oversight mechanisms
- Businesses transitioning from a family company to a corporate structure
- Organisations wanting to place stakeholder expectations within a governance framework
- Those wanting to strengthen the governance (G) component of their ESG reporting
Is It Mandatory?
Not mandatory, and no accredited certification is issued. The corporate governance principles in capital-markets legislation are separate, binding regulations; ISO 37000 does not substitute for them.
Scope of the Standard
- The purpose of governance and defining the organisation's reason for existing
- Values and a culture of ethical conduct
- Strategy and oversight: the role of the governing body
- Accountability and stakeholder engagement
- The composition, competence and effectiveness of the governing body
- Risk governance and the internal-control environment
- Social responsibility, sustainability and transparency
- Oversight of performance and viability
Certification Process
- 1Gap AnalysisCurrent practices are compared against the guidance's recommendations; gaps are identified.
- 2ApplicationThe process, roles and records the guidance recommends are implemented, adapted to the organisation's own structure.
- 3Internal AssessmentThe effectiveness of implementation is measured through internal audit and review.
- 4Second-Party Assessment (optional)A customer or an independent party can assess the implementation's conformity with the guidance and issue a report. This is not an accredited certificate.
Period of Validity
This document is guidance; because no accredited certificate is issued, it also has no validity period. Implementation depends on the organisation's own review schedule.
Required Documents
- Existing policy, procedure and process descriptions
- Relevant records and measurement data
- Definitions of responsibility and authority
Certification Cost
There is no fixed list price; the cost is calculated based on the following variables and provided in writing in the quote.
- The scope of the gap analysis
- Whether implementation consultancy is requested
- Whether a second-party assessment is requested
Accreditation
This document is not a requirement but a guide; That's why accredited certification is NOT provided. If anyone submits an accredited document such as "ISO 31000 certificate", this is against the accreditation rules. Implementation of the guidance can be considered as evidence in the audit of the relevant specification standard (e.g. ISO 9001, ISO 45001).
The scope under which this scheme can be offered varies according to your product and activity; it is confirmed in writing at the quote stage.
Scope and authorisationsRelated Certifications
Frequently Asked Questions
Can ISO 37000 be certified?
No. It is a guidance document; no accredited certification is issued for it. Its application can be used as an input to a second-party assessment or a corporate governance rating.


