ISO 37001 Consultancy: Anti-Bribery Management System

ISO 37001 is the international standard for anti-bribery management systems (ABMS). It sets requirements and gives guidance for establishing, implementing, maintaining and improving a system that helps an organisation prevent, detect and respond to bribery. With CE Danışmanı (CE Consultant) you get your ISO 37001 certificate through a single point of contact for the whole process.

What the standard addresses

ISO 37001 deals with bribery in the activities of the organisation, including:

• Bribes given directly or indirectly to public officials
• Bribes given to employees or managers in the private sector
• Gifts and hospitality of excessive value offered to influence a business relationship
• Improper or excessive commissions and intermediary fees
• Conflicts of interest, where personal interest is put before the interest of the organisation

Why bribery is a business risk

Bribery raises the cost of projects and services, distorts fair competition and weakens the trust of investors, customers and the public. For the company involved it can lead to legal proceedings, heavy fines and prison sentences, and to lasting damage to its reputation and brand. It also lowers staff morale and reveals weak internal controls. Many international organisations and public bodies expect the companies they work with to have an effective anti-bribery system, so conformity with ISO 37001 can be a condition for international cooperation and market access.

The six principles of an ABMS

1. Management commitment and leadership. Top management leads the system and shows its commitment. Its determination directly affects how well the system works.
2. Anti-bribery policy and procedures. The organisation sets a clear policy and communicates it to all employees and relevant parties. Detailed procedures support it, covering risk assessment, reporting channels and corrective action.
3. Risk assessment and management. Bribery risks are identified, assessed and prioritised regularly across all areas of operation. Controls are defined for the risks found and kept under review.
4. Training and awareness. Employees and relevant parties are trained regularly on the policy and the procedures.
5. Monitoring, audit and review. The system is monitored through internal audits and compliance checks. Top management reviews its effectiveness and decides on improvements.
6. Reporting and investigation. Employees and other stakeholders can raise concerns confidentially. Reports are investigated and corrective and preventive action follows.

Typical controls

• A formal anti-bribery policy and the resources needed to apply it
• Regular bribery risk assessments and planned controls for the risks identified
• Effective internal controls, internal audits and compliance audits
• Confidential reporting lines, with protection of the people who report
• Fast corrective action when a case is found, and measures to prevent a repeat
• Checks on the anti-bribery policies of suppliers and business partners
• Anti-bribery clauses in contracts with third parties
• Records that show the policy and procedures are applied

What a company gains

• Support in meeting local and international anti-bribery laws and regulations, and lower exposure to penalties
• Protection of reputation and more trust from customers, partners and investors
• Bribery risks that are identified and managed, with fewer financial losses
• Fairer and more objective decision making
• Higher staff morale and loyalty in a workplace where integrity is expected
• Access to new business and markets where an anti-bribery system is requested

The steps to certification

1. Top management commits to the system. The policy is written and responsibilities are assigned.
2. Existing systems, policies and procedures are reviewed.
3. Bribery risks are identified, assessed and prioritised.
4. Policies and procedures are written and put into practice.
5. Training programs for employees and relevant parties are prepared and delivered.
6. The system is applied across the whole organisation and monitored.
7. Internal audits are carried out and nonconformities are corrected.
8. Top management reviews the performance of the system.
9. An accredited certification body is chosen and the application is made.
10. The certification body reviews the documentation and audits the organisation on site.
11. If the audits are successful, the certification body issues the ISO 37001 certificate.
12. Surveillance audits follow at regular intervals after certification.

How CE Danışmanı helps

• Initial meeting and review of your current situation, followed by a roadmap prepared for your company
• Bribery risk assessment, policy and procedures prepared with your team
• Training for employees and internal auditors
• Internal audit and preparation for the certification audit

The system can be integrated with ISO 9001 where a quality management system is already in place.

Tell us about your company and we will reply with our offer as soon as possible.

Message us on WhatsApp · info@cedanismani.com · Contact form