Integrating ISO 27001 and ISO 22301: The winning combination for modern businesses

Information Security

Adopting the ISO/IEC 27001 and ISO 22301 standards together is a strategic move to strengthen organizational resilience. This powerful combination provides a comprehensive framework that enables companies to effectively prevent, respond to, recover from, and adapt to disruptive events that could otherwise compromise their operations.

 

 

Integrating these two standards acts as a strategic enabler for building true organizational resilience—defined as a company’s ability to anticipate, withstand, respond to, recover from, and adapt to disruptions while safeguarding business continuity and creating value for stakeholders. Applying them jointly goes far beyond mere regulatory compliance; it establishes a robust management model that equips the organization to navigate a landscape of increasingly dynamic, complex, and interdependent risks.

 

 

SO/IEC 27001 and ISO 22301 promote a proactive approach driven by top management leadership, systematic risk management, and continuous improvement. This synergy ensures the protection of critical corporate assets, guarantees information security, and safeguards essential business functions. When an incident or crisis strikes, the alignment between these standards enables a structured, coordinated response that prioritizes the recovery of key business operations.

 

 

Based on a structured risk analysis and a clear understanding of stakeholder needs and expectations, organizations can implement controls and strategies designed to protect both data and critical workflows. This dual approach facilitates the timely restoration of essential functions following an interruption. Furthermore, it allows for the planned, controlled, and progressive recovery of all other processes, significantly mitigating the operational, financial, legal, and reputational impacts of an incident.

 

 

Integrating these standards provides end-to-end protection by combining measures to preserve the confidentiality, integrity, and availability of information with the organizational capabilities needed to keep essential processes running. As a result, the organization is better equipped to respond effectively to any disruptive event. This means minimized downtime, optimized decision-making during incident management, and stronger recovery capabilities.

 

 

Consequently, financial and operational losses are significantly reduced by lowering the likelihood of risks materializing, limiting the scope of damage, and accelerating the recovery of high-priority activities.

 

 

Meeting the requirements of both ISO/IEC 27001 and ISO 22301 boosts the confidence of customers, business partners, regulatory authorities, and other stakeholders. It visibly demonstrates the organization’s commitment to information security, business continuity, and compliance with legal, regulatory, and contractual obligations. Together, the coordinated implementation of these management systems strengthens corporate governance, improves the ability to anticipate and respond to emerging risks, and cements a culture of resilience.

 

 

Ultimately, organizations achieve a holistic defense mechanism. By combining controls that safeguard information assets with strategies that ensure uninterrupted core operations, companies develop enhanced readiness. This increases their ability to contain impacts, recover rapidly, and adapt to new operating conditions without compromising strategic objectives.

 

 

This level of preparedness translates into a sustainable competitive advantage. By increasing reliability, operational stability, and adaptability in an increasingly dynamic and uncertain environment, organizations secure their long-term sustainability and growth.

 

 

Authors: Juan Carlos Polanco / Lead Auditor, Integrated Management Systems

 

 

Technical References:
– ISO/IEC 27001:2022
– ISO 22301: 2019

How digitalization strengthens energy management with ISO 50001 real-time energy monitoring

Energy

Digitalization has transformed the way organizations manage energy, since the use of digital technologies has made it possible to move from a reactive approach to a proactive one based on real-time data, directly strengthening energy performance. In this blog, we still discuss how real-time energy monitoring promotes compliance with and the effectiveness of the Energy Management System (EnMS), in line with requirements of the ISO 50001 standard.

 

What is real-time energy monitoring?

 

Real-time monitoring consists of the continuous capture of energy data through sensors, smart meters, and digital platforms that make it possible to visualize energy consumption immediately.

 

This includes electricity consumption by equipment or process, operating variables, temperature, pressure, production, energy use patterns, and alarms for deviations. This ability for continuous observation is directly aligned with the monitoring. Measurement, analysis, and evaluation requirements established in Clause 9 of ISO 50001.

 

Relationship with the requirements of ISO 50001

 

  • Monitoring, measurement, and analysis

 

ISO 50001 establishes in subclause 9.1 that organizations must determine what needs to be monitored, how it will be measured, and when the results will be analyzed. Real-time monitoring makes it possible to meet this requirement more accurately, since it reduces dependence on manual measurements, increases the frequency and reliability of the data, and facilitates the immediate analysis of energy performance.

 

  • Energy performance indicators (EnPI)

 

The standard requires establishing ENPIs to evaluate energy performance. With digitalization, EnPIs are calculated automatically, displayed on real-time dashboards, and deviations are detected immediately; this allows for much more dynamic and effective management.

 

  • Energy baseline (EnB)

 

The standard establishes that the organizations must define an energy baseline to compare performance. Real-time monitoring makes it possible to adjust the baseline more accurately, identify relevant operational variations, and avoid incorrect interpretations caused by lack of data.

 

Real-tie energy monitoring is not only a technological improvement, but also a driver of energy performance within the framework of ISO 50001. It makes it possible to meet the requirements for monitoring, measurement, and continuous improvement more robustly, strengthening data-based decision-making. Organizations that integrate digitalization into their EnMS not only comply with the standards, but also again a competitive advantage by managing energy in a more efficient, precise, and strategic way.

 

Authors: D. Peña and C. Valenzuela.

 

References

 

International Organization for Standardization (ISO). ISO 50001. Energy management. Available online at: https://www.iso.org/iso-50001-energy-management.html. Accessed on 06/01/2026.

 

International Organization for Standardization (ISO). ISO 50001:2018. Energy management systems. Requirements with guidance for use.

ISO standards on the soccer field

Management Systems

When we think of a soccer field, the first things that come to mind are the rolling ball, the excitement of the fans, and the passion of the players. However, behind every match, there is a silent structure ensuring that everything functions correctly: ISO standards. These international standards are not there by chance; they are the result of decades of technical development aimed at ensuring quality, safety, sustainability, and efficiency in virtually every environment, including soccer fields.

 

The field as system: order, quality, and consistency

 

A soccer field is not just a bounded space with grass. It is a complex system where multiple elements interact: the playing surface, drainage, lighting, facilities, maintenance, and operational management. This is where ISO standards come into play, as they allow processes related to the construction, maintenance, and operation of the field to be carried out in a standardized manner, ensuring that every match takes place under consistent conditions. From ground leveling to maintenance scheduling, everything can be managed with a continuous improvement approach.

 

Safety in every play

 

The safety of players, referees, and spectators is a top priority. In this regard, ISO standards help identify risks and establish controls in activities such as turf maintenance, the use of machinery, or the installation of temporary structures. This translates into concrete actions: obstacle- free surfaces, proper signage, emergency protocols, and safe conditions for the staff operating the field. Although the spectator may not perceive it, every detail has been carefully considered.

 

Sustainability: the match is almost played with the environment

 

Nowadays, a soccer field also is a space where environmental commitments are reflected. Iso standards enable the management of aspects such as water consumption for irrigation, rainwater harvesting, efficient energy use in lighting, and the proper disposal of waste generated during sporting events. For instance, the use of automated irrigation systems, LED lighting, and stadium recycling programs are practices aligned with ISO standards. Thus, soccer not only entertains but can also be an ally to the environment.

 

Infrastructure and technology: precision behind the show

 

Modern fields integrate advanced technology: drainage system that prevent waterlogging, hybrid grass, high-efficiency lighting, and even sensors to monitor field conditions. These innovations are typically backed by technical standards that ensure their quality and performance. For example, they can be applied in material testing, ensuring that synthetic or natural tuft meets specific criteria for resistance, impact absorption, and durability.

 

Use experience: the spectators matter too

 

Players are not the only ones who benefit from the application of ISO standards; the fan experience is also impacted. From organized access to adequate restroom facilities, efficient management based on standards allows for safer, more comfortable, and orderly events. Even aspects such as cowd management, cleanliness, and logistics can be aligned with management systems that enhance the overall experience of the sporting event.

 

ISO standards do not score goals or save penalties, but they make it possible for the game to take place under optimal conditions. They are the invisible gears that sustain the quality, safety, and sustainability of soccer fields.

 

The next time you watch a match, remember that behind every precise pass and spectacular play, there is a well-structured system making it possible. And within that system, ISO standards play a fundamental role.

 

Authors: D. Peña and C. Valenzuela.

 

References

 

 

BRCGS Gluten-Free and Storage & Distribution: Key Features

Food Safety

In an environment where food safety, transparency, and consumer trust are decisive factors, BRCGS standards stand as key tools for ensuring product integrity throughout the entire supply chain. Among them, the Gluten-Free and Storage & Distribution standards stand out by addressing specific risks from production and logistics to warehousing and retail. In this blog, we will analyze the core features of each standard.

 

BRCGS Gluten-Free Global Standard

 

This standard is built upon a risk management system designed to control the presence of gluten at every stage of the production process—from raw material reception to the finished product. Unlike approaches limited solely to end-product testing, this standard:

 

  • Integrates preventive controls throughout the entire process.
  • Specifically addresses the risk of cross-contamination.
  • Seamlessly integrates with food safety audits.

 

One of its primary values is global recognition, as it is endorsed by celiac associations across multiple regions. It directly responds to consumer demand, where 91% of consumers consider third-party verification to be essential.

 

Implementing this standard drives improvements such as systematic process control, reduced product recall risks, operational standardization, and enhanced brand strength. Strategically, it allows organizations to transition from a reactive model to a proactive, risk-based management approach, strengthening the overall food safety culture.

 

BRCGS Storage and Distribution Standard

 

Specifically designed for logistics operations—including warehousing, transportation, and distribution—this standard aims to maintain product safety, quality, legality, and integrity. It applies to food, packaging, and consumer goods alike. It complements other BRCGS schemes within the supply chain, covering the gap between production and final delivery, thereby bolstering trust between manufacturers, distributors, and retailers.

 

This standard incorporates:

 

  • Third-party audits: Announced, unannounced, or hybrid formats.
  • Logistics operations control: Focusing on product handling without processing.
  • Risk management: Specific to transportation and storage conditions.
  • Scalability: Applicable to multi-site operations and complex logistics networks.

 

As a GFSI-recognized scheme, it ensures alignment with international best practices. Its implementation yields direct benefits in traceability, reduced product loss, and operational efficiency. In essence, this standard fortifies the supply chain, ensuring that the quality achieved during production is preserved until it reaches the end consumer.

 

The implementation of both standards does not only ensure compliance; it drives an organizational transformation toward efficiency, risk prevention, and continuous improvement. The Gluten-Free standard ensures products meet strict safety expectations for sensitive consumers, while Storage and Distribution ensures that integrity is maintained throughout the logistics journey. Together, they represent a comprehensive strategy that allows organizations to elevate their operational maturity and generate sustained market trust.

 

References

 

British Retail Consortium (BRC). BRCGS Standards: Gluten-Free Certification. Retrieved online from: Gluten Free Certification on April 21, 2026.

 

British Retail Consortium (BRC). BRCGS Standards: Storage and Distribution Certification. Retrieved online from: BRCGS Storage and Distribution Certification on April 21, 2026.

 

Authors: D. Pena & C. Valenzuela.

The Evolution of ISO 22000 Toward Its 2026 Version

Food Safety

Food safety does not happen by accident; behind every process are international standards that help make it possible. One of these is the ISO 22000 Food Safety Management Systems standard developed by the International Organization for Standardization (ISO). Recently, the ISO/DIS 22000 draft was published, offering an overview of the direction the standard may take. In this blog, we explain the four pillars of this potential change.

 

  • The Impact of Climate Change

 

Organizations are encouraged to look beyond their internal operations. Climate change is included in sub-clause 4.1, as droughts and extreme temperatures can affect the safety of ingredients, and organizations must plan how to respond to these challenges.

 

 

  • It Is Not Only About the Process; It Is Also About Culture

 

Food Safety Culture is introduced as a requirement in sub-clause 5.4. What does this mean? It means that management must ensure personnel not only follow rules but also understand why they are important. It represents a shift from “I do it because I’m being watched” to “I do it because I care about product safety.” In this way, food safety stops being the responsibility of a single department and becomes a value shared across the entire organization.

 

 

  • Protection Against the Unexpected

 

Today’s world presents risks that were not as evident in the past; therefore, organizations are now required to implement mandatory plans for Food Defense and Food Fraud Prevention.

 

 

  • Complaint Management

 

A specific section on Complaint Management has been created in Clause 10.3. This encourages organizations to use customer complaints as a valuable source of data for improvement. If something goes wrong, the system must learn from it in a formal and documented manner.

 

This update is not merely a matter of bureaucracy. It is a response to a world that is increasingly complex, digitized, and risk aware. However, it is important to remember that the ISO/DIS 22000 document is still a draft and remains subject to change. Even so, it offers useful guidance on the direction the standard may take, particularly in the integration of food safety culture and resilience against fraud and external threats.

 

References: International Organization for Standardization (ISO). ISO/DIS 22000: Food safety management systems — Requirements for any organization in the food chain.

 

Authors: D. Peña and C. Valenzuela.

Resilience in the Face of Disruption: Pandemics, Cyberattacks, and Logistical Crises

Health

In an interconnected and highly dynamic world, organizations face increasingly frequent and complex disruptions: global pandemics, sophisticated cyberattacks, and logistical crises that impact entire supply chains. Consequently, organizational resilience is no longer an optional concept; it is an essential strategic capability.

 

Organizational resilience is defined as a company’s ability to anticipate, prepare for, respond to, and adapt to both gradual and sudden changes and disruptions to survive and thrive. But how is a resilient organization built? In the following blog, we will examine how ISO standards offer a solid, structured, and proven framework to anticipate, withstand, adapt to, and recover from disruptive events.

 

  • Understanding Context and Interdependencies

 

The starting point is recognizing that no organization operates in isolation. Internal and external factors—such as regulations, technology, the market, organizational culture, or logistical dependencies—directly influence response capacity. ISO standards promote a structured analysis of the organizational context within their management systems, identifying stakeholders and their expectations while detecting systemic vulnerabilities. This enables an organization to be conscious of its environment and better prepared to anticipate disruptions.

 

  • Risk-Based Thinking as a Central Axis

 

Resilience is built through anticipation. The risk-based approach, which is transversal across ISO standards, allows organizations to move beyond reactive management. These standards promote systems where risks are managed cross-functionally rather than by individual areas. Critical operational, digital, logistical, and human scenarios are prioritized, and preventive controls and response plans are designed. This allows organizations to reduce uncertainty and increase their capacity to act before a crisis occurs.

 

  • An Organizational Culture Oriented Toward Resilience

 

No management system functions without committed individuals. ISO standards drive active and visible leadership, clearly defined roles and responsibilities, and risk awareness at all levels. When resilience becomes part of the culture, collaborators react more quickly, dependence on centralized decision-making is reduced, and continuous improvement is fostered. This results in an organization that responds in a coordinated, rather than chaotic, manner.

 

  • Robust yet Flexible Processes

 

ISO standards promote process standardization while simultaneously encouraging adaptability. A resilient organization defines clear, measurable, and documented processes, establishes controls to ensure consistency, and designs mechanisms for flexibility in the face of change. This ensures that, during disruption, critical processes continue to operate, decisions are made based on reliable information, improvisation is minimized, and operational continuity is maintained with adaptive capacity.

 

  • Comprehensive Asset Protection

 

Resilience depends not only on operations but on protecting what makes those operations possible: information, infrastructure, talent, and the supply chain. ISO standards facilitate an integrated approach where information security aligns with business continuity, the supply chain is managed considering global risks, and critical assets are identified and prioritized. This leads to lower exposure to severe interruptions and a higher capacity for recovery.

 

  • Preparation, Response, and Continuous Learning

 

Resilience does not end with withering a crisis; it concludes with learning from it. Management systems proposed by ISO standards encourage continuity plans, incident response, periodic drills and testing, performance evaluation, internal audits, corrective actions, and continuous improvement. Thus, every disruption becomes an opportunity to strengthen the system, resulting in an organization that evolves with each adverse event.

 

  • Data-Driven Decision Making

 

ISO standards promote the use of indicators and information analysis for management. This allows for real-time risk monitoring, evaluation of control effectiveness, and informed decision-making under pressure. This provides organizations with greater precision and a smaller margin of error in critical scenarios.

 

  • Resilience as a System, not a Reaction

 

A resilient organization is not one that never fails, but one that detects early warning signs, responds in a structured manner, adapts quickly, and learns continuously. ISO standards do not eliminate disruptions, but they do allow them to be managed intelligently, reducing their impact and accelerating recovery.

 

Building resilience is not just about reacting to crises; it is about integrating risk management and continuity into the business strategy. ISO standards allow for the integration of strategy, risks, processes, technology, and culture into a single management system. They enable the development of sustainable organizational capacity in an environment where crises are inevitable and the difference between surviving or disappearing lies in how prepared the organization is before the disruption occurs.

 

 

References

 

  1. D. V. Capera. Organizational Resilience and the ISO 22316 Standard: A State of the Art. Revista Innova ITFIP, 12 (1), pp 11-26. 2023.

 

Author: D. Peña and C. Valenzuela

ISO 14001:2026 Standard – Key Changes and Their Impact on Your Environmental Management System

Environmental

April 2026 marks the official release of the updated ISO 14001 standard, evolving from the version 2015 to the 2026. This update represents a significant step forward in the evolution of Environmental Management Systems (EMS). The new version introduces critical changes that address today’s environmental challenges, such as climate change, resource scarcity, and the growing need for more strategic, results-based management. Beyond mere compliance, this update encourages organizations to integrate environmental thinking into their decision-making processes, strengthen risk management, and broaden their perspective across the entire value chain.

 

The most significant changes include:

 

  1. Greater Emphasis on the Organizational Context (Subclause 4.1):

 

There is a deeper focus on aspects such as pollution levels, natural resource availability, climate change, biodiversity, and ecosystem health. These factors are now explicitly considered within this requirement.

 

  1. Life Cycle Consideration in Defining the EMS Scope (Subclause 4.3):

 

The life cycle perspective is reinforced, even when defining the scope of the Environmental Management System. Organizations must now consider their authority and ability to exercise control and influence throughout the life cycle of their activities, products, and services.

 

  1. Promoting an Environmental Culture (Subclause 5.1):

 

Annex A places a stronger emphasis on creating an organizational culture that actively engages personnel in activities that contribute to the intended outcomes of the environmental management system.

 

  1. Strengthening Actions to Address Risks and Opportunities (Subclause 6.1)

 

A new subpart, 6.1.4 “Risks and Opportunities,” has been added to provide a comprehensive approach to identifying and addressing these factors.

 

  1. New Requirement: Planning of Changes (Subclause 6.3):

 

A key new subclause has been added for the planning and management of changes. This allows organizations to anticipate impacts and adapt in a controlled manner to modifications in their processes or operating conditions.

 

  1. Restructuring of Clause 10: Improvement:

 

Clause 10 on continual improvement has been strengthened with a clearer interpretation. This enables organizations to demonstrate the improvement of their EMS as a planned, measurable process aligned with their strategic objectives.

 

The new version of the ISO 14001 standard represents an evolution that reinforces the strategic approach to environmental management, driving organizations to demonstrate results that go beyond regulatory compliance. While these changes do not imply a total transformation of the system, they do require significant adjustments in how context is analyzed, risks are managed, and environmental performance is evidenced. It is essential to stay informed regarding official communications concerning the transition period during which organizations will be able to adapt their systems to align with the new requirements.

 

References

 

International Organization for Standardization (ISO). ISO 14001:2026: Environmental management systems — Requirements with guidance for use.

 

Author: Ing. Anne Michelle Gaitán

FDA’s Front-of-Package Nutrition Labeling Regulation

Food Safety

The food labeling you see on the products you buy is no coincidence… it’s regulated! In the United States, the U.S. Food and Drug Administration (FDA) is the authority responsible for ensuring that prepackaged foods contain nutritional information that allows consumers to make informed decisions. One of the most relevant and recent topics is front-of-package (FOP) labeling. In this blog, we will discuss what it is, why it’s gaining attention, and how it affects both manufacturers and consumers.

 

What is Front-of-Package (FOP) Labeling?

 

Front-of-package labeling (FOP) is a nutritional information system that would appear on the front of food product packaging. It provides a summary showing whether a product is high or low in certain critical nutrients. Its purpose is to communicate data simply and visually, allowing consumers to quickly and easily identify how foods can fit into a healthy diet without having to search for the traditional “Nutrition Facts” label on the back or side.

 

What is the FDA Currently Proposing?

 

In early 2025, the FDA proposed a rule requiring most prepackaged foods sold in the United States to feature a new graphic called the “Nutrition Info box.” This box would appear on the front of the packaging and provide interpretive information regarding saturated fat, sodium, and added sugars. This label would classify each nutrient as “Low,” “Med,” or “High,” enabling consumers to evaluate a product’s nutritional quality at a glance without reading the entire traditional label.

 

How Does It Differ From Current Labeling?

 

Feature Nutrition Facts Label Nutrition Info Box
Location Located on the back or side of the package. Would be located on the front of the package.
Content Contains detailed information (calories, fats, vitamins, etc.). Would highlight 3 key nutrients with simple classifications.
Format Nutritional information is expressed in quantities/amounts. Information would be expressed interpretively (Low, Medium, or High).

 

Why is This Proposal Important?

 

Science and internal FDA studies suggest that interpretive front-of-package labeling can facilitate consumer decision-making during grocery shopping. Therefore, the goal of this proposal is to improve public health by:

 

  • Helping consumers quickly identify foods that can contribute to a healthy diet.
  • Reducing the risk of diet-related chronic diseases, such as diabetes, heart disease, or obesity.
  • Complementing the Dietary Guidelines for Americans with a more accessible way to view relevant nutritional information.

 

What Does This Mean for Manufacturers and Consumers?

 

  • For Manufacturers: If the rule is finalized, companies will need to update their packaging to include FOP labeling within the established timeframes. This involves additional nutritional analysis to categorize nutrient levels as low, medium, or high.
  • For Consumers: Shoppers will be able to see vital information at a glance. This makes it easier to compare similar products quickly without having to analyze the traditional detailed panel.

 

Front-of-package labeling is a key FDA proposal aimed at making critical nutritional information more accessible to consumers. This could support healthier eating habits and help combat diet-related chronic diseases. Although it is still in the comment phase and is not yet mandatory, it represents one of the most significant food labeling initiatives in the U.S. in recent years.

 

References.

 

U.S. Food and Drug Administration. FDA Issues Proposed Rule on Front-of-Package Nutrition Labeling. Accessed online at: FDA Issues Proposed Rule on Front-of-Package Nutrition Labeling | FDA on 02/18/2026.

Authors: D. Peña and C. Valenzuela.

Natural Capital Accounting

Environmental

Currently, organizations operate in an environment where sustainability is no longer optional but a key factor for competitiveness, regulatory compliance, and market longevity. In this context, Natural Capital Accounting (NCA) has emerged as a strategic tool for understanding, managing, and protecting the natural resources that make any organization’s operations possible.

 

Natural Capital Accounting is a management approach that allows organizations to identify, measure, value, and communicate their relationship with nature. This includes both their dependencies water, energy, soil, and biodiversity, and their impacts on ecosystems throughout the entire value chain.

 

By integrating environmental data into the decision-making process through structured reports—combining financial, environmental, and socioeconomic information—NCA demonstrates how an organization relies on natural systems and how it affects them.

 

To help organizations establish clear guidelines for conducting natural capital assessments in a structured, transparent, and comparable manner, the International Organization for Standardization (ISO) developed the ISO 14054 standard: Natural capital accounting for organizations — Principles, requirements and guidance.

 

The standard does not seek to arbitrarily “put a price” on nature. Instead, it aims to:

 

· Support strategic decisions based on integrated environmental and economic data.

· Complement financial systems rather than replace them.

· Strengthen evidence-based sustainable decision-making.

 

Key Requirements

 

Under this standard, organizations are expected to:

 

· Identify dependencies and impacts on natural capital.

· Utilize physical indicators (e.g., m3 of water, tons of soil, hectares).

· Value impacts in economic terms whenever possible.

· Integrate this information into risk management, investment strategies, and corporate planning.

 

The standard can be implemented by organizations of any size and sector, including industry, agriculture, energy, services, construction, logistics, and finance. Each entity can adapt the scope and depth of the analysis according to its specific objectives and sustainability maturity. Adopting Natural Capital Accounting through the ISO 14054 framework helps organizations:

 

· Anticipate environmental and regulatory risks.

· Optimize resource use and reduce operational costs.

· Strengthen business resilience against climate change.

· Comply with international sustainability standards.

· Build trust with investors, customers, society, and stakeholders.

· Identify opportunities for innovation and continuous improvement.

 

In simple terms, the standard helps answer critical questions: How much water does my operation consume and what risk does scarcity pose? What impact does my supply chain have on ecosystems? What would be the future cost of losing these resources?

 

Natural Capital Accounting represents a fundamental shift in how organizations perceive and manage their relationship with the environment. Integrating nature into decision-making is no longer just a sustainability practice—it is a core business strategy that builds resilience, mitigates risk, and creates long-term value.

 

References

 

World Bank. Natural Capital Accounting. Accessed online on : Natural Capital Accounting: Issue Brief

 

International Organization for Standardization (ISO). ISO 14054:2025 Natural capital accounting for organizations — Principles, requirements and guidance. Accessed online on: ISO 14054:2025 – Natural capital accounting for organizations — Principles, requirements and guidance

 

Authors: D. Peña and C. Valenzuela.

Beyond Anti-Bribery: Governance and Sustainability with ISO 37001

Antibribery

For organizations that have implemented or are looking to establish a system under the ISO 37001 framework, it is crucial to emphasize that the 2025 version now requires the consideration of all stakeholder needs and aspects related to the environment.

 

Below, we share key considerations regarding the importance of governance in establishing an anti-bribery system with a focus on environmental stewardship.

 

The Role of the Anti-Bribery System

 

It is important to remember that an anti-bribery management system is applicable to any organization, whether public or private. The intent of this international framework is to systematically provide employees with the necessary tools to combat acts of corruption, thereby increasing transparency and building trust with clients.

 

Integrating Environmental Context

 

Regarding the specific updates to ISO 37001— aligned with other ISO management system standards—organizations must now ensure that the tools used to identify the Context of the Organization (Clause 4.1) include environmental impacts that exist and could interfere with operations. Furthermore, organizations must consider how their own operations affect the environment.

 

Similarly, for the clause related to Understanding the Needs and Expectations of Interested Parties (Clause 4.2), it is essential to investigate the identified stakeholders to determine which environmental requirements and expectations must be met.

 

The Power of Governance

 

The cornerstone of establishing an anti-bribery system with an environmental focus is, undoubtedly, the organization’s governance. Leadership is what motivates employees and defines the path forward; it is what ensures the anti-bribery system truly functions rather than remaining just another document in the management system.

 

An active and motivating governance structure is characterized by:

 

  • Consistent and visible leadership.
  • Allocation of sufficient resources.
  • The cultivation of ethics and, in this case, environmental awareness.
  • The establishment of a policy that not only seeks compliance with the standard but also fosters a culture of environmental care.

 

Conclusion

 

Based on the above, an ISO 37001 system that aims to go beyond compliance to support sustainability must strengthen its context analysis and its identification of stakeholder needs. It requires an anti-bribery policy with a “green” perspective, the allocation of pertinent resources to achieve these objectives, increased awareness, and, above all, a governance model that creates, motivates, and reinforces the commitment of its workforce to these critical issues.

 

References.

 

N. R. Adams. ITLawCo. How ISO 37001 evolved between 2016 and 2025. Viewed online at ‘How ISO 37001 evolved between 2016 and 2025 – ITLawCo’ on 01/23/2026.

 

Authors: Eng. Guillermo Eudave, M.Sc. Gibrán Vallín – Technical Support, Global Standards Integrated Systems

1 2 3 7 »