ISO 37001 — Anti-Bribery

Standard — Anti-bribery

ISO 37001 — Anti-Bribery

Anti-Bribery Management System (ABMS) — prevent, detect and address bribery across your operations and partnerships.

ISO 37001:2016 is the international reference standard for anti-bribery management systems. It helps organisations comply with national anti-bribery requirements (Sapin II in France, FCPA in the US, UK Bribery Act, Canada CFPOA) and demonstrate their ethical commitment to partners, authorities and investors.

Why pursue ISO 37001 certification?

  • Legal compliance — Structured framework to meet Sapin II, FCPA, UKBA and equivalent national laws.
  • Legal defence — Proof that the organisation has implemented reasonable measures: a key argument in case of investigation.
  • Partner trust — Advantage in international tenders, public procurement, and with financial institutions.
  • Risk reduction — Identification of risky transactions, exposed third parties, sensitive sectors.
  • Ethical culture — Team awareness, code of conduct, protected whistleblowing channel.

What the standard requires

  • Bribery risk mapping — Activities, geographies, sectors, third parties (clients, suppliers, intermediaries, public officials)
  • Anti-bribery policy — Top management commitment, zero tolerance, internal and external communication
  • Compliance function (compliance officer) — Role, independence, resources, direct link to governance
  • Third-party due diligence — Risk assessment of partners, intermediaries, joint ventures
  • Financial and commercial controls — Gifts, hospitality, donations, sponsorship, facilitation payments
  • Awareness and training — All employees, especially exposed functions
  • Whistleblowing system — Confidential, whistleblower protection, investigation process
  • Internal audit and management review — Effectiveness measurement, continual improvement

Our 5-step approach

  1. Anti-bribery risk mapping — Tailored diagnosis by sector, geographies, third parties, at-risk activities.
  2. ABMS design — Policy, code of conduct, organisation, key controls.
  3. Deployment and training — Procedures, third-party due diligence, whistleblowing system, team awareness.
  4. Internal audit and management review — Effectiveness testing, identification of residual gaps.
  5. Certification support — Choice of certifying body, official audit, post-certification follow-up.

Who is it for?

Organisations exposed to cross-border bribery risks or operating in at-risk sectors: extractive industries, construction, defence, energy, infrastructure, finance, healthcare, pharma, public tenders. Also relevant for exporting SMEs and non-profit organisations.

Timeline and cost

Typical duration: 8 to 12 months for initial certification.
Pricing: fixed-price. Quote within 48 hours.

Scroll to Top