ISO 37301
International certifiable standard for compliance management systems
EN 1090
EU standard for steel and aluminium structural execution.
Quick Verdict
ISO 37301 provides certifiable compliance management for all organizations globally, fostering risk-based governance. EN 1090 mandates CE marking for EU structural steel/aluminium via FPC. Companies adopt ISO 37301 for integrity culture; EN 1090 for legal market access.
ISO 37301
ISO 37301:2021 Compliance management systems – Requirements
Key Features
- Certifiable requirements replacing guidance-only ISO 19600
- High-Level Structure aligns with other ISO standards
- Leadership commitment builds compliance culture
- Risk-based planning addresses obligations and risks
- Robust whistleblowing protections prevent retaliation
EN 1090
EN 1090: Execution of steel structures
Key Features
- Factory Production Control (FPC) certification required
- Risk-based Execution Classes (EXC1-4) scaling
- CE marking for EU market access
- Welding quality aligned with ISO 3834
- Full material and process traceability
Detailed Analysis
A comprehensive look at the specific requirements, scope, and impact of each standard.
ISO 37301 Details
What It Is
ISO 37301:2021 is a certifiable international standard specifying requirements with guidance for establishing, implementing, maintaining, and improving Compliance Management Systems (CMS). It applies universally across organizations, using a risk-based, PDCA (Plan-Do-Check-Act) approach aligned with the ISO High-Level Structure (HLS).
Key Components
- Core pillars: context analysis, leadership, planning, support, operation, performance evaluation, improvement.
- Emphasizes leadership commitment, risk assessment, whistleblowing channels, internal audits, and continual improvement.
- Built on HLS for integration; companion standards like ISO 37302 for metrics.
- Supports third-party certification via accredited bodies.
Why Organizations Use It
Drives regulatory compliance, reduces risks/fines, enhances stakeholder trust and reputation. Meets investor/ESG demands, provides certification for competitive edge. Mitigates reputational harm through proactive culture.
Implementation Overview
Phased: gap analysis, obligation register, training, audits. Scalable for SMEs/enterprises, all sectors/geographies. Requires accredited certification (3-year cycle); integrates with ISO 9001/27001.
EN 1090 Details
What It Is
EN 1090 is a harmonized European standard family (EN 1090-1, -2, -3) under the Construction Products Regulation (CPR). It governs execution and conformity assessment of structural steel and aluminium components for construction works. Primary purpose: ensure safe fabrication, assembly, and CE marking via risk-based Execution Classes (EXC1-4).
Key Components
- **EN 1090-1Conformity assessment, Factory Production Control (FPC) certification.
- **EN 1090-2/-3Technical rules for steel/aluminium (welding, tolerances, corrosion protection).
- Core pillars: FPC, welding per ISO 3834, material traceability, NDT inspection.
- AVCP systems with Notified Body oversight; no fixed control count, scales by EXC.
Why Organizations Use It
- Mandatory CE marking for EU market access.
- Mitigates liability, reduces rework via disciplined processes.
- Builds trust, enables high-risk projects (bridges, stadia).
- Strategic: differentiates via certified quality, traceability.
Implementation Overview
- Phased: gap analysis, FPC build, personnel training, NB certification, surveillance.
- Targets fabricators in EU/EEA; all sizes, heavy on welding shops.
- Involves audits, ITT/ITC; 6-12 months typical for EXC2.
Key Differences
| Aspect | ISO 37301 | EN 1090 |
|---|---|---|
| Scope | Compliance management systems across all obligations | Execution of steel/aluminium structural components |
| Industry | All sectors, global applicability | Construction/metal fabrication, EU/EEA market |
| Nature | Voluntary certifiable management standard | Mandatory for CE marking under CPR |
| Testing | Internal audits, management reviews | FPC certification, NB surveillance audits |
| Penalties | Loss of certification, no legal fines | Market exclusion, fines, product recalls |
Scope
Industry
Nature
Testing
Penalties
Frequently Asked Questions
Common questions about ISO 37301 and EN 1090
ISO 37301 FAQ
EN 1090 FAQ
You Might also be Interested in These Articles...
SOC 2 Audit Survival Guide: 10 Red Flags Auditors Flag and Model Answers for Walkthroughs
Master SOC 2 Type 2 audits with our guide: 10 red flags like incomplete logs/vendor gaps, model walkthrough answers, psychology tips. Pass first-time with <5% e
CIS Controls v8.1 for Cloud & Kubernetes: A Practical Implementation Playbook (AWS/Azure/GCP + IaC)
Translate CIS Controls v8.1 to cloud-native: Kubernetes patterns for IAM, logging, vuln mgmt, hardening on AWS, Azure, GCP + IaC. Practical playbook for teams.
CIS Controls v8.1, Operationalized: Top 10 Reasons Compliance Monitoring Software Accelerates Real-World Implementation
Operationalize CIS Controls v8.1 with compliance monitoring software. Turn checklists into dashboards, tickets, and audit-proof workflows. Top 10 reasons it acc
Run Maturity Assessments with GRADUM
Transform your compliance journey with our AI-powered assessment platform
Assess your organization's maturity across multiple standards and regulations including ISO 27001, DORA, NIS2, NIST, GDPR, and hundreds more. Get actionable insights and track your progress with collaborative, AI-powered evaluations.
Check out these other Gradum.io Standards Comparison Pages
UAE PDPL vs J-SOX
Compare UAE PDPL vs J-SOX: UAE's GDPR-like privacy law meets Japan's ICFR regime. Uncover key differences, compliance strategies & implementation for global firms. (152 characters)
PRINCE2 vs MLPS 2.0 (Multi-Level Protection Scheme)
Compare PRINCE2 vs MLPS 2.0: Project governance mastery meets China's cybersecurity graded protection. Gain compliance strategies, tailoring tips & implementation insights for success. Explore now!
ISO 27032 vs SOC 2
Discover ISO 27032 vs SOC 2: Global Internet cybersecurity guidelines vs AICPA TSC for SaaS trust. Compare scopes, audits, implementation & choose your compliance edge now.