ISO 37001:2016
Type of Certification: Anti-Bribery
Name: ISO 37001:2016 – Anti-Bribery Management Systems
Description:
Organisations may face various types of bribery risks based on its size, location and sector in which it operates, as well as the nature, and complexity of its activities. ISO 37001:2016 is designed to help an organisation prevent, detect and respond to bribery, as well as to comply with local and international anti-bribery laws.
An anti-bribery management system is a voluntary commitment, which requires leadership and input from top management, and the involvement of all staff and external parties such as contractors, suppliers and joint- venture partners. The system can be implemented as a stand-alone system or integrated into an overall management system including ISO 9001, ISO 14001, ISO/IEC 27001 and ISO 19600, as well as management standards such as ISO 26000 and ISO 31000.
ISO 37001:2016 does not specifically address fraud, cartels and other anti-trust/competition offences, money-laundering or other activities related to corrupt practices. However, an organisation may choose to extend the scope of the management system to include such activities.
Main Components:
ISO 37001:2016 specifies the requirements and provides guidance for establishing, implementing, maintaining, reviewing and improving an anti-bribery management system. It can assist an organisation implement an anti-bribery management system or enhance the current controls, through measures such as adopting an anti-bribery policy, appointing personnel to oversee compliance, vetting and training employees, and conducting risk assessments on projects and business associates, implementing financial and commercial controls, and instituting reporting and investigation procedures.
The management system addresses the following organisational activities:
- bribery in the public, private and not-for-profit sectors;
- bribery by the organisation's personnel acting on the organisation's behalf or for its benefit;
- bribery by the organisation's business associates acting on the organisation's behalf or for its benefit;
- bribery of the organisation's personnel in relation to the organisation's activities;
- bribery of the organisation's business associates in relation to the organisation's activities;
- direct and indirect bribery (e.g. a bribe offered or accepted through or by a third party).
Conformity with this standard does not provide assurance that no bribery has occurred or will occur in relation to the organisation, as it is not possible to completely eliminate the risk of bribery. However, it can help the organisation implement reasonable and proportionate measures designed to prevent, detect and respond to bribery.
Who should be certified:
This can be applied to small, medium and large organisations (or parts of an organisations) in all sectors, including public, private and not-for-profit sectors.
Benefits:
- Reduced risk of bribery
- Demonstrate commitment to prevent bribery to management, employees, stakeholders, business associates and customers.
- Ensure internationally recognised best practices as anti-bribery controls
- Provide evidence in event of criminal investigation
- Enhanced organisational reputation
Contributes to SDGs:
- Goal 8: Decent Work and Economic Growth
- Goal 10: Reduced Inequalities
- Goal 11: Sustainable Cities & Communities
- Goal 16: Peace, Justice & Strong Institutions