ISO 37001:2025
Anti-Bribery Management System
Demonstrable integrity before governments, partners and auditors.
Current edition: ISO 37001:2025.
What it is
What the standard covers
ISO 37001 sets the requirements to prevent, detect and respond to bribery. It covers bribery risk assessment, third-party due diligence, financial and non-financial controls, conflict-of-interest management, reporting channels and an anti-bribery function with defined independence.
Who it is for
- Organisations contracting with government or bidding for tenders
- Companies working through agents, intermediaries or distributors
- Institutions administering public or third-party funds
- Groups operating across multiple jurisdictions
Problems it helps manage
- Third-party relationships without documented due diligence
- Gifts, hospitality and donations without policy or record
- No trusted reporting channel
- Compliance demands from parent companies, banks or international partners
Business benefits
- Bribery risk assessed by process and by counterparty
- Verifiable controls over payments, third parties and conflicts of interest
- Reporting channel with whistleblower protection
- A defensible position before authorities, banks and counterparties
Sectors
Where it applies
Support
What the engagement includes
- Documented initial gap analysis
- Management system design
- Complete, tailored documentation
- Implementation support, on site or remote
- Training for the key team
- Internal audit and closure of findings
- Readiness and support through the certification audit
Integration with other standards
This standard commonly integrates with: ISO 9001, ISO/IEC 27001, ISO 22301. An integrated system reduces duplicated documentation and audit time.
Stages
How the project runs
Gap analysis and planning
We review the real operation, not a questionnaire. We identify gaps against the standard, critical processes, existing evidence and regulatory risk.
Selecting the standard or combination
We define which standard answers the organisation's risk and objective. The choice is technical, not a matter of popularity.
Management system design
We structure processes, responsibilities, indicators and controls according to size, sector and applicable regulation.
Documentation development
We write policy, procedures, records and matrices tailored to the operation. No generic templates.
Guided implementation
We work with each process owner until the system is used day to day, not only stored in a folder.
Team training
We train the key team on the standard, on the system and on their role during the audit.
FAQ
Frequently asked questions — ISO 37001
Does certification guarantee bribery will not occur?
Does it apply to small companies?
You may also need
Related standards
Quality Management System
The foundational system every other standard builds on.
View details →ISO/IEC 27001:2022Information Security Management System
Information security as a system, not as an antivirus.
View details →ISO 22301:2019Business Continuity Management System
What the organisation does when something stops.
View details →Next step
Every organisation is different. The right system starts with a gap analysis.
Write to us and we will arrange a strategy meeting: we review your current situation, define the right system, set scope and timelines and resolve technical and regulatory questions.
A certification done properly is not chased. It is built.