ISO 37001 is an international standard that provides requirements for anti-bribery management systems. It is designed to help organizations of all sizes and industries establish, implement, maintain and continually improve a system to prevent, detect and respond to bribery.
The standard is based on the principles of good governance, transparency and accountability. It requires organizations to develop and implement policies and procedures to prevent bribery, conduct due diligence on business partners, monitor and report bribery risks, and investigate and address allegations of bribery.
ISO 37001 can be used by organizations of all sizes and sectors, including businesses, governments and non-profit organizations. It can also be used in conjunction with other management systems such as ISO 9001 (quality management) and ISO 14001 (environmental management).
Benefits of ISO 37001 certification:
- Reducing the risk of bribery: ISO 37001 can help organizations reduce the risk of bribery by taking effective prevention measures.
- Improved reputation: ISO 37001 certification can help organizations improve their reputation with customers, suppliers and other stakeholders.
- Increased efficiency: ISO 37001 can help organizations increase their efficiency by streamlining their anti-bribery processes.
- Advanced compatibility: ISO 37001 can help organizations comply with anti-bribery laws and regulations.
Key requirements of ISO 37001:
- Leadership commitment: Organizations must demonstrate leadership commitment to combating bribery.
- Anti-bribery policy: Organizations should develop and implement an anti-bribery policy.
- Risk assessment: Organizations should conduct a risk assessment to identify and evaluate bribery risks.
- Due diligence: Organizations must conduct due diligence on their business partners.
- Education and awareness: Organizations should provide their employees with anti-bribery training and awareness.
- Monitoring and reporting: Organizations must monitor and report bribery risks.
- Investigation and correction: Organizations must investigate and remediate allegations of bribery.
Certification process:
To become ISO 37001 certified, organizations must undergo an assessment by a certified certification body. The assessment will include a review of the organisation's anti-bribery management system and a gap analysis to identify areas for improvement.
Once the organization addresses the identified gaps, it will be audited by the certification body. If the organization meets all the requirements of ISO 37001, it will be certified.
ISO 37001 certification is valid for three years. Organizations must undergo a surveillance audit annually to maintain their certification.
Certification Process
- First Evaluation: A gap analysis is conducted to evaluate the organization's current practices against ISO 37001 requirements.
- Development of Anti-Bribery Management System: The organization creates a tailored Anti-Bribery Management System (ABMS) tailored to its specific needs and risks.
- Application and Documentation: ABMS is implemented throughout the organization and relevant documentation is prepared.
- Internal Audit: Internal audit is carried out to evaluate the effectiveness of the ABMS.
- Certification Audit: A certification body performs a comprehensive audit to verify compliance with ISO 37001 standards.
- Certification: If the organization meets all the conditions, it is entitled to receive ISO 37001 certification.