Western Australian compliance has a structural feature that distinguishes it from the eastern states. A large share of obligations attach not to the company but to the thing: a tenement, a licence, a Ministerial statement, a prescribed premises. They survive corporate restructures, transfers and management changes, and they accumulate over decades.

The practical consequence is that organisations here regularly discover obligations nobody currently employed knew existed. A condition imposed on a mining tenement in the 1990s. A licence requirement attaching to a site acquired in a portfolio transaction. Reporting obligations that ran continuously while the people responsible for them changed four times.

Nathan ISO Consulting implements compliance management systems under ISO 37301:2021 for Western Australian organisations, building registers that follow obligations to whatever they attach to rather than only to the entity.

Why ISO 37301 matters for Western Australian organisations

Obligation persistence is the first reason. Where duties attach to assets and approvals rather than to entities, the corporate knowledge that would normally carry them is unreliable. A register that records the instrument, the site and the condition survives the personnel changes that would otherwise lose it.

Distributed operations are the second. A WA business frequently holds obligations across multiple regimes at multiple sites administered by different regulators. Safety at a mine sits with the mines inspectorate; environment with the environmental regulator; tenement conditions with the mining department; workplace obligations at the Perth office with the general safety regulator. No single relationship covers it.

The third reason is scrutiny cycles. Resources operators, health providers and government-contracted services in this state face periodic reviews, and the question asked in each is consistent: what arrangements were meant to prevent this, and how did you know they were working. An obligations register with monitoring evidence answers that; a policy library does not.

The regimes a Western Australian register must carry

Perth and regional WA coverage

Following the obligation rather than the entity

Most compliance registers are built around the company. In Western Australia that misses a category of obligation entirely, because the duty is attached to a tenement, an approval or a premises and travels with it.

A register built properly for this state records the instrument, what it attaches to, the site or tenure identifier, the condition itself, who in the business is accountable, the control and the evidence it operated. Built that way, a portfolio acquisition becomes a due diligence exercise the register can absorb rather than a discovery process that runs for two years afterwards.

Ownership creates the usual friction. Where every entry names the compliance or legal function, a regulator reads accountability as having been delegated rather than accepted. Pushing conditions out to the people managing the sites they attach to is the most valuable and least comfortable part of the work.

Our delivery model in Western Australia

Establishing the foundation

Scope gets drawn first, covering which legal entities, tenements, approvals, licences and categories of site fall inside it, and which regulator oversees each. Building the register then works from the instruments you actually hold, not an industry precedent, because precedents capture company-level duties and overlook everything fixed to tenure and approvals. Risk work follows to produce a priority order that will withstand challenge, then control mapping, and finally the governance, reporting and monitoring arrangements.

Taking you through assessment

Compliance management draws a smaller pool of accredited assessors than quality or security does, and their grasp of particular sectors is uneven. We find ones with real exposure to resources, health or government-contracted work as your situation requires, agree commercial terms and dates, and deliver readiness via internal audit and a documented review. Both stages are attended.

Holding it together afterwards

Instruments are amended, conditions varied, tenements transferred and regulators restructured, none of it arriving as an internal notification. Keeping the register aligned is our work, alongside recurring audit and surveillance readiness, so it reflects the current position rather than the position at handover.

Your deliverables

Where Perth ISO 37301 projects go wrong

Who certifies you, and where we fit

We implement. An accredited body certifies.

Nathan ISO Consulting builds and implements management systems. We do not issue certificates, and no legitimate consultancy does. Your certificate comes from an independent certification body accredited by JAS-ANZ, the accreditation authority appointed jointly by the Australian and New Zealand governments. Accredited bodies operate under impartiality rules that prohibit them from certifying a system they helped build, which is precisely why the two roles are separate. Our job is to get you audit-ready, help you select the right accredited body, and stand alongside you through assessment.

Which accredited body you engage, on what terms and to what timetable, is work we take off you, matched against scope, sector and the audit approach that fits how you operate. Both assessment stages are attended by our people, and resolving whatever gets raised belongs to us rather than arriving as a list once the assessor leaves. Check one thing yourself first: that the JAS-ANZ register lists the body as accredited for your particular scope. Certificates from unaccredited providers cost little and take days, and procurement teams reject them regularly enough that the check pays for itself.