ISO 37001: Anti-Bribery Management System
Standard
What is ISO?
The International Organization for
Standardization (ISO) develops and
publishes International standards.
It is compromised of the national standards
bodies from 163 member countries.
It has developed nearly twenty thousand
voluntary international standards
What is ISO 37001?
An anti-bribery management system standard,
currently under development.
It is designed to help an organization establish,
implement, maintain, and improve an anti-bribery
compliance program or management system.
It includes a series of measures and controls that
represent global anti-corruption good practice.
Who can use this Standard?
The standard is flexible and can be adapted to a wide
range of organizations, including:
Large organizations
Small & medium sized enterprises (SMEs)
Public and private sector organizations
Non-governmental organizations (NGOs)
The standard can be used by organizations in any
country.
Does the Standard require a stand-alone
Management System?
The measures required by ISO 37001 are
designed to be integrated with existing
management processes and controls.
Follows the common high-level structure for
management system standards, for easy
integration with, for example, ISO 9001
New or enhanced measures can be integrated into
existing systems.
What does ISO 37001 address?
Bribery by the organization, or by its personnel
or business associates acting on the
organizations behalf or for its benefit
Bribery of the organization, or of its personnel or
business associates in relation to the
organizations activities
Does the Standard define bribery?
Bribery is defined by law which varies between
countries. Therefore the Standard does not
provide an independent definition of bribery.
The Standard provides guidance on what is
meant by bribery to help users understand the
intention and scope of the Standard.
What does the standard require?
A series of measures and controls to help prevent, detect, and address
bribery, among them:
An anti-bribery policy, procedures, and controls
Top management leadership, commitment and responsibility
Senior level oversight
Anti-bribery training
Risk assessments
Due diligence on projects and business associates
Reporting, monitoring, investigation and review
Corrective action and continual improvement
What if a Standard provision is illegal in a country?
ISO specifies measures and controls globally
regarded as anti-corruption good practice.
If a requirement is prohibited by applicable law,
an organization will not be required to comply
with that requirement, but can comply with the
remainder of the standard.
How will the Standard benefit an organization?
By providing:
Minimum requirements and supporting guidance
for implementing or benchmarking an anti-bribery
management system
Assurance to management, investors, employees,
customers, and other stakeholders that an
organization is taking steps to prevent bribery risk
Evidence that an organization has taken
reasonable steps to prevent bribery
Can my organization be ISO 37001
certified?
ISO 37001 is being developed as a requirements
standard, making it capable of independent
certification.
If approved as such, third parties will be able to
certify an organizations compliance with the
Standard.
Timeline of the Standards Development
In 2013, Project Committee ISO/PC 278 was established to develop the
new anti-bribery standard.
Almost 45 countries and 7 liaison organizations comprise the committee.
Four committee meetings have taken place:
London (June 2013);
Madrid (March 2014);
Miami (September 2014);
Paris (March 2015).
The next meeting is scheduled for Kuala Lumpur in September 2015.
The publication of the standard is expected in late 2016.