Standard — Anti-bribery
ISO 37001 — Anti-Bribery
Anti-Bribery Management System (ABMS) — prevent, detect and address bribery across your operations and partnerships.
ISO 37001:2016 is the international reference standard for anti-bribery management systems. It helps organisations comply with national anti-bribery requirements (Sapin II in France, FCPA in the US, UK Bribery Act, Canada CFPOA) and demonstrate their ethical commitment to partners, authorities and investors.
Why pursue ISO 37001 certification?
- Legal compliance — Structured framework to meet Sapin II, FCPA, UKBA and equivalent national laws.
- Legal defence — Proof that the organisation has implemented reasonable measures: a key argument in case of investigation.
- Partner trust — Advantage in international tenders, public procurement, and with financial institutions.
- Risk reduction — Identification of risky transactions, exposed third parties, sensitive sectors.
- Ethical culture — Team awareness, code of conduct, protected whistleblowing channel.
What the standard requires
- Bribery risk mapping — Activities, geographies, sectors, third parties (clients, suppliers, intermediaries, public officials)
- Anti-bribery policy — Top management commitment, zero tolerance, internal and external communication
- Compliance function (compliance officer) — Role, independence, resources, direct link to governance
- Third-party due diligence — Risk assessment of partners, intermediaries, joint ventures
- Financial and commercial controls — Gifts, hospitality, donations, sponsorship, facilitation payments
- Awareness and training — All employees, especially exposed functions
- Whistleblowing system — Confidential, whistleblower protection, investigation process
- Internal audit and management review — Effectiveness measurement, continual improvement
Our 5-step approach
- Anti-bribery risk mapping — Tailored diagnosis by sector, geographies, third parties, at-risk activities.
- ABMS design — Policy, code of conduct, organisation, key controls.
- Deployment and training — Procedures, third-party due diligence, whistleblowing system, team awareness.
- Internal audit and management review — Effectiveness testing, identification of residual gaps.
- Certification support — Choice of certifying body, official audit, post-certification follow-up.
Who is it for?
Organisations exposed to cross-border bribery risks or operating in at-risk sectors: extractive industries, construction, defence, energy, infrastructure, finance, healthcare, pharma, public tenders. Also relevant for exporting SMEs and non-profit organisations.
Timeline and cost
Typical duration: 8 to 12 months for initial certification.
Pricing: fixed-price. Quote within 48 hours.
