NS-ISO 37301:2021 — Compliance management systems, requirements with guidance

Designation

NS-ISO 37301:2021

Edition

2021

Publisher

Standard Norge

Group

Risk, compliance and continuity

Area

Finance and anti-money laundering

Read date

2026-09-09

Standards are not statute. They are purchased documents from Standard Norge that parties agree to, or that regulations refer to. We carry the designation, edition and scope, never the text.

• Buy the standard from Standard NorgeNS-ISO 37301:2021
• Publisher: Standard Norge

• Anti-Money Laundering Act

  LOV-2018-06-01-23In force: 2018-10-15Finanstilsynet

  The Act requires obliged entities to carry out risk assessments, keep procedures, apply customer due diligence, monitor relationships, investigate and report to Økokrim, and retain records. The duties also apply outside the financial sector, including to accountants, auditors, lawyers and estate agents.

• Financial Institutions Act

  LOV-2015-04-10-17In force: 2016-01-01Finanstilsynet

  The Act regulates authorisation, ownership control, organisation, capital requirements, conduct of business and crisis management for banks, credit institutions, finance companies, insurers and pension undertakings.

• Risk management, guidelines

  NS-ISO 31000:2018Standard Norge

  The principles and process for enterprise risk management: identification, analysis, evaluation, treatment, monitoring and reporting. It is guidance and cannot be certified, but it is used as a reference in internal control and board reporting.

• Anti-bribery management systems, requirements with guidance

  NS-ISO 37001:2016Standard Norge

  Measures against bribery: risk assessment, due diligence on business associates, gifts and hospitality, third-party controls and investigation. It is used alongside the customer due diligence duties of the Anti-Money Laundering Act in internationally exposed businesses.

• Requirements for risk assessments

  NS 5814:2021Standard Norge

  The Norwegian method for planning, conducting and documenting a risk assessment: purpose, scope, acceptance criteria, analysis and verifiable documentation. It is widely used in HSE work, emergency preparedness and public procurement.

• Business continuity management systems, requirements

  NS-EN ISO 22301:2019Standard Norge

  The requirements for continuity management: impact analysis, recovery times, continuity plans, exercises and review. Financial undertakings and public sector suppliers meet the same requirements again in supervisory rules on operational continuity and outsourcing.