What is ISO 37001

ISO 37001 is a certification standard for an Anti-Bribery Management System (ABMS). This standard provides guidelines for implementing a management system that helps organizations prevent, detect, and respond to bribery, while also ensuring compliance with anti-bribery laws and voluntary commitments applicable to their activities.
Although it does not specifically address fraud, cartels, and other anti-competition violations, money laundering, or other corrupt practices, organizations can choose to extend the scope of their management systems to include such activities.
While adopting this management system cannot entirely eliminate the risk of corruption, it can assist in implementing reasonable and proportional measures to prevent, detect, and respond to bribery risks.

Effectiveness of ISO 37001

Corruption is a widespread phenomenon, raising serious social, moral, economic, and political concerns. It undermines good governance, hinders development, distorts competition, and disrupts justice. Corruption infringes upon human rights and acts as a barrier to poverty alleviation.
Additionally, it increases the cost of doing business, creates uncertainty in trade, raises the prices of goods and services, and reduces their quality, leading to loss of life and property. It erodes public trust in institutions and impedes the fair and efficient functioning of markets.

Governments worldwide have advanced anti-corruption policies through international agreements, such as the OECD "Convention on Combating Bribery of Foreign Public Officials in International Business Transactions" and the "United Nations Convention against Corruption," as well as domestic laws.
However, laws alone are insufficient to solve the problem. Organizations have a responsibility to actively contribute to anti-bribery efforts, which can be achieved through leadership that establishes an anti-bribery management system along with a culture of integrity, transparency, openness, and compliance - the very purpose of this standard.
A well-managed organization, with proper management systems and compliance policies, can demonstrate its commitment to integrity and fulfill its legal obligations. The anti-bribery policy is a key component of an organization's overall compliance framework.
An anti-bribery policy and supporting management system help organizations prevent or mitigate the costs, risks, and damage associated with bribery, while enhancing trust and reputation in business dealings.

Compliance with this standard does not guarantee the complete elimination of bribery risks, nor does it ensure that bribery has not occurred or will not occur within an organization.
However, this standard aids in implementing reasonable and proportionate measures to prevent, detect, and respond to bribery risks within the organization.

Relationship between PDCA and the framework in this International Standard

ISO 37001:2016 Requirements

4. Context of the organization
  • 4.1 Understanding the organization and its context
  • 4.2 Understanding the needs and expectations of stakeholders
  • 4.3 Determining the scope of the anti-bribery management system
  • 4.4 Anti-bribery management system
  • 4.5 Bribery risk assessment
5. Leadership
  • 5.1 Leadership and commitment
  • 5.2 Anti-bribery policy
  • 5.3 Organizational roles, responsibilities and authorities
6. Planning
  • 6.1 Actions to address risks and opportunities
  • 6.2 Anti-bribery objectives and planning to achieve them
7. Support
  • 7.1 Resources
  • 7.2 Competence
  • 7.3 Awareness and training
  • 7.4 Communication
  • 7.5 Documented information
8. Operation
  • 8.1 Operational planning and control
  • 8.2 Due diligence
  • 8.3 Financial controls
  • 8.4 Non-financial controls
  • 8.5 Implementation of anti-bribery controls by controlled organizations and by business associates
  • 8.6 Anti-bribery commitments
  • 8.7 Gifts, hospitality, donations and similar benefits
  • 8.8 Managing inadequacy of anti-bribery controls
  • 8.9 Raising concerns
  • 8.10 Investigating and dealing with bribery
9. Performance evaluation
  • 9.1 Monitoring, measurement, analysis and evaluation
  • 9.2 Internal audit
  • 9.3 Management review
  • 9.4 Review by anti-bribery compliance function
10. Improvement
  • 10.1 Nonconformity and corrective action
  • 10.2 Continual improvement

Contact Person

Kim Gi Beom

kgb@icrqa.com

Lee Jae Min

lee2750@icrqa.com