ISO 37001:2016 Anti-Bribery Management System

Home

ISO 37001:2016 Anti-Bribery Management System

ISO 37001

ISO 37001:2016 specifies requirements and provides guidance for establishing, implementing, maintaining, reviewing and improving an anti-bribery management system. The system can be stand-alone or can be integrated into an overall management system.

ISO 37001:2016 is applicable only to bribery. It sets out requirements and provides guidance for a management system designed to help an organization to prevent, detect and respond to bribery and comply with anti-bribery laws and voluntary commitments applicable to its activities.

ISO 37001:2016 does not specifically address fraud, cartels and other anti-trust/competition offences, money-laundering or other activities related to corrupt practices, although an organization can choose to extend the scope of the management system to include such activities.

The requirements of ISO 37001:2016 are generic and are intended to be applicable to all organizations (or parts of an organization), regardless of type, size and nature of activity, and whether in the public, private or not-for-profit sectors.

The Benefits of 37001

Bribery in the public, private and not-for-profit sectors
Bribery by the organization’s personnel acting on the organization’s behalf or for its benefit
Bribery by the organization
Bribery by the organization’s business associates acting on the organization’s behalf or for its benefit
Bribery of the organization’s personnel in relation to the organization’s activities
Direct and indirect bribery (e.g. a bribe offered or accepted through or by a third party)
Bribery of the organization

Frequently asked question

Enhanced Trust and Credibility

Achieving certification or accreditation for GDPR compliance demonstrates to customers, partners, and stakeholders that the organization takes data protection seriously. It enhances trust and credibility by providing assurance that the organization complies with GDPR requirements and protects individuals’ personal data.

Competitive Advantage

In a business environment where data privacy is increasingly valued, GDPR certification can differentiate an organization from its competitors. It can serve as a competitive advantage, especially when dealing with customers or partners who prioritize data protection and compliance.

Legal Compliance and Risk Mitigation

GDPR certification indicates that the organization has implemented appropriate measures to comply with the stringent data protection requirements mandated by GDPR. It helps mitigate legal risks associated with data breaches, non-compliance, and regulatory fines by demonstrating a proactive approach to data protection.

Improved Data Governance

The process of preparing for GDPR certification requires organizations to review and enhance their data governance practices. This includes documenting data processing activities, implementing privacy policies and procedures, conducting risk assessments, and establishing mechanisms for data subject rights management. These improvements contribute to better data governance and management practices within the organization.