Framework overlap

Does ISO 30401 cover ISO 39001:2012?

You hold ISO 30401 and have been told to do ISO 39001:2012. Here is how much overlaps, control by control.

59% of ISO 39001:2012 you already have

ISO 30401 already covers about 59% of ISO 39001:2012, leaving 69 of 168 controls as genuinely new work.

Already covered 3 Likely covered 96 New work 69

What is genuinely new work

Nothing in ISO 30401 reaches these. This is the list to scope.

ISO-22313-4.1
Understanding the organization and its context
ISO-22313-4.2
Understanding the needs and expectations of interested parties
ISO-22313-4.3
Determining the scope of the BCMS
ISO-22313-4.4
Business continuity management system
ISO-22313-5.2
Policy
ISO-22313-6.2
Business continuity objectives and plans to achieve them
ISO-22313-6.3
Planning changes to the BCMS
ISO-22313-8.3
Business continuity strategies and solutions
ISO-22313-8.4
Business continuity plans and procedures
ISO-22313-8.5
Exercise programme
ISO-37002-4.1
Understanding the organization and its context
ISO-37002-4.2
Understanding the needs and expectations of interested parties
ISO-37002-4.3
Determining the scope of the whistleblowing management system
ISO-37002-4.4
Whistleblowing management system
ISO-37002-5.2
Whistleblowing policy
ISO-37002-6.2
Whistleblowing management system objectives and planning
ISO-39001-4.1
Understanding the organization and its context
ISO-39001-4.2
Understanding the needs and expectations of interested parties
ISO-39001-4.3
Determining the scope of the RTS management system
ISO-39001-4.4
RTS management system
ISO-39001-5.2
RTS policy
ISO-39001-6.2
RTS performance factors
ISO-39001-6.3
RTS objectives and planning to achieve them
ISO-39001-8.2
Emergency preparedness and response
ISO-41001-4.2
Understanding the needs and expectations of interested parties
ISO-41001-4.4
Facility management system
ISO-41001-5.2
Facility management policy
ISO-41001-6.2
Facility management objectives and planning to achieve them
ISO-41001-6.3
Planning of changes
ISO-41001-7.6
Organizational knowledge
ISO-41001-8.2
Coordination with stakeholders
ISO-41001-8.3
Integration of services
ISO-50001-4.1
Understanding the organization and its context
ISO-50001-4.2
Understanding the needs and expectations of interested parties
ISO-50001-4.3
Determining the scope of the EnMS
ISO-50001-4.4
Energy management system
ISO-50001-5.2
Energy policy
ISO-50001-6.2
Objectives, energy targets and planning to achieve them
ISO-50001-6.3
Energy review
ISO-50001-6.4
Energy performance indicators (EnPIs)
ISO-50001-6.5
Energy baseline (EnB)
ISO-50001-6.6
Planning for the collection of energy data
ISO-50001-9.2
Evaluation of compliance with legal and other requirements
ISO-56002-4.1
Understanding the organization and its context
ISO-56002-4.2
Understanding the needs and expectations of interested parties
ISO-56002-4.4
Establishing the innovation management system
ISO-56002-5.2
Innovation policy
ISO-56002-5.3
Innovation vision and strategy
ISO-56002-5.5
Organizational culture
ISO-56002-6.2
Innovation objectives and planning to achieve them
ISO-56002-6.3
Organizational structures
ISO-56002-6.4
Innovation portfolios
ISO-56002-7.6
Tools and methods
ISO-56002-7.7
Strategic intelligence management
ISO-56002-7.8
Intellectual property management
ISO39001-4.1
Understanding the Organization and Its Context
ISO39001-4.2
Needs and Expectations of Interested Parties
ISO39001-4.4
RTS Management System
ISO39001-5.2
RTS Policy
ISO39001-6.2
RTS Performance Factors
ISO39001-6.2.PostCrash
Post-Crash Response
ISO39001-6.2.SafeRoadUsers
Safe Road Users
ISO39001-6.2.SafeRoads
Safe Roads and Roadsides
ISO39001-6.2.SafeSpeeds
Safe Speeds
ISO39001-6.2.SafeVehicles
Safe Vehicles
ISO39001-6.3
RTS Objectives and Planning
ISO39001-7.4
Communication and Coordination
ISO39001-8.2
Emergency Preparedness and Response
ISO39001-9.1.Crash
Crash and Other RTS Incident Investigation
Show the 99 you already have
ISO-39001-10.1
Nonconformity and corrective action
ISO-41001-10.1
Nonconformity and corrective action
ISO-56002-10.2
Deviation, nonconformity and corrective action
ISO-22313-10.1
Nonconformity and corrective action
ISO-22313-10.2
Continual improvement
ISO-22313-5.1
Leadership and commitment
ISO-22313-5.3
Organizational roles, responsibilities and authorities
ISO-22313-6.1
Actions to address risks and opportunities
ISO-22313-7.1
Resources
ISO-22313-7.2
Competence
ISO-22313-7.3
Awareness
ISO-22313-7.4
Communication
ISO-22313-7.5
Documented information
ISO-22313-8.1
Operational planning and control
ISO-22313-8.2
Business impact analysis and risk assessment
ISO-22313-9.1
Monitoring, measurement, analysis and evaluation
ISO-22313-9.2
Internal audit
ISO-22313-9.3
Management review
ISO-37002-10.1
Nonconformity and corrective action
ISO-37002-10.2
Continual improvement
ISO-37002-5.1
Leadership and commitment
ISO-37002-5.3
Organizational roles, responsibilities and authorities
ISO-37002-6.1
Actions to address risks and opportunities
ISO-37002-7.1
Resources
ISO-37002-7.2
Competence
ISO-37002-7.3
Awareness and training
ISO-37002-7.4
Communication
ISO-37002-7.5
Documented information
ISO-37002-9.1
Monitoring, measurement, analysis and evaluation
ISO-37002-9.2
Internal audit
ISO-37002-9.3
Management review
ISO-39001-10.2
Continual improvement
ISO-39001-5.1
Leadership and commitment
ISO-39001-5.3
Organizational roles, responsibilities and authorities
ISO-39001-6.1
Actions to address risks and opportunities
ISO-39001-7.1
Resources
ISO-39001-7.2
Competence
ISO-39001-7.3
Awareness
ISO-39001-7.4
Communication
ISO-39001-7.5
Documented information
ISO-39001-8.1
Operational planning and control
ISO-39001-9.1
Monitoring, measurement, analysis and evaluation
ISO-39001-9.2
Internal audit
ISO-39001-9.3
Management review
ISO-41001-10.2
Continual improvement
ISO-41001-4.1
Understanding the organization and its context
ISO-41001-4.3
Determining the scope of the FM management system
ISO-41001-5.1
Leadership and commitment
ISO-41001-5.3
Organizational roles, responsibilities and authorities
ISO-41001-6.1
Actions to address risks and opportunities
ISO-41001-7.1
Resources
ISO-41001-7.2
Competence
ISO-41001-7.3
Awareness
ISO-41001-7.4
Communication
ISO-41001-7.5
Documented information
ISO-41001-8.1
Operational planning and control
ISO-41001-8.4
Control of outsourced processes and services
ISO-41001-9.1
Monitoring, measurement, analysis and evaluation
ISO-41001-9.2
Internal audit
ISO-41001-9.3
Management review
ISO-50001-10.1
Nonconformity and corrective action
ISO-50001-10.2
Continual improvement
ISO-50001-5.1
Leadership and commitment
ISO-50001-5.3
Organizational roles, responsibilities and authorities
ISO-50001-6.1
Actions to address risks and opportunities
ISO-50001-7.1
Resources
ISO-50001-7.2
Competence
ISO-50001-7.3
Awareness
ISO-50001-7.4
Communication
ISO-50001-7.5
Documented information
ISO-50001-8.1
Operational planning and control
ISO-50001-8.2
Design
ISO-50001-8.3
Procurement
ISO-50001-9.1
Monitoring, measurement, analysis and evaluation of energy performance
ISO-50001-9.3
Internal audit
ISO-50001-9.4
Management review
ISO-56002-10.3
Continual improvement
ISO-56002-4.3
Determining the scope of the innovation management system
ISO-56002-5.1
Leadership and commitment
ISO-56002-5.4
Organizational roles, responsibilities and authorities
ISO-56002-6.1
Actions to address opportunities and risks
ISO-56002-7.1
Resources
ISO-56002-7.2
Competence
ISO-56002-7.3
Awareness
ISO-56002-7.4
Communication
ISO-56002-7.5
Documented information
ISO-56002-9.1
Monitoring, measurement, analysis and evaluation
ISO-56002-9.2
Internal audit
ISO-56002-9.3
Management review
ISO39001-10.1
Nonconformity and Corrective Action
ISO39001-10.2
Continual Improvement
ISO39001-5.1
Leadership and Commitment
ISO39001-7.2
Competence
ISO39001-7.3
Awareness
ISO39001-7.5
Documented Information
ISO39001-8.1
Operational Planning and Control
ISO39001-9.1
Monitoring, Measurement, Analysis, and Evaluation
ISO39001-9.2
Internal Audit
ISO39001-9.3
Management Review

How this is calculated

Already covered means a mapping runs from a control in ISO 30401 to that control. Likely covered means no direct mapping exists but both frameworks map to the same control in a third standard. New work means neither. We keep those separate rather than adding them into one friendlier number, because blending them would present a two-hop inference as a verified fact.

Coverage is not symmetric. Run it the other way and you will get a different number; both are correct.

From 332,959 cross-framework control mappings across 723 frameworks, 531 of them verified against their source documents. It does not tell you that you are compliant: a mapped control means the two standards ask for the same thing, not that you have done it.

Try another pair ยท Today's edition