ISO 37001 Certification - Anti-bribery management system

What is ISO 37001?

ISO 37001 – “Anti-bribery management systems. Requirements with guidance for use” – is the standard that helps organisations to prevent, detect and combat bribery manage bribery risks through clear policies, risk assessments, controls and reporting mechanisms. Bribery may involve financial or non-financial benefits and may occur directly or through intermediaries in dealings with individuals or organisations in the public, private or non-profit sectors. Therefore, ISO 37001 provides a framework applicable to any organisation, regardless of its size, sector or field of activity.

What is an anti-bribery management system?

It is the set of policies, responsibilities, procedures and controls through which the organisation identifies the risks of bribery and determines how to prevent them, how to report suspicions and how to respond when problems arise. It represents a structured way of working, implemented and reviewed over time, establishing a culture of integrity and transparency, which increases the likelihood of detecting bribery and reduces its incidence.

Prevention, detection and response

The anti-bribery management system in accordance with ISO 37001 operates along three mutually reinforcing strands:

• Prevention – through an anti-bribery policy, staff training, risk assessment, due diligence on business partners, and financial and non-financial controls;
• Detection – monitoring of relevant activities, channels through which suspicions can be reported, and audits and checks proportionate to the risks;
• Response – analysing and investigating reports, addressing non-conformities and implementing corrective measures, where appropriate.

The aim of these measures is to reduce the risk of bribery and to improve the organisation’s ability to identify and deal with suspicious situations.

The requirements of the ISO 37001 standard

The anti-bribery management system sets out requirements covering a number of key aspects:

• anti-bribery policy and objectives;
• management commitment and accountability;
• communicating the policy to staff and business partners;
• the appointment of a person or a monitoring body;
• staff vetting and training;
• regular assessments of the risk of bribery;
• due diligence procedures, particularly with regard to business partners;
• anti-bribery control measures, both financial and non-financial;
• reporting, monitoring, investigation and auditing;
• corrective actions and continuous improvement.

These requirements apply not only within the organisation, but also in its dealings with external parties – contractors, suppliers and partners involved, for example, in corporate merger processes.

The role of management and the anti-bribery function

Implementing an effective anti-bribery management system is not possible without leadership and commitment from senior management. Senior management must communicate the anti-bribery policy and programme to all staff and external parties and visibly champion a culture of integrity. The anti-bribery function plays a key role – the person or structure designated to oversee compliance with the policy, to audit and train staff, and to monitor the functioning of the system, with the necessary independence. Through this commitment, the organisation demonstrates to management, employees, customers and business partners that it has implemented an internationally recognised best practice.

ISO 37001:2025 – the new edition of the standard

In February 2025, a new edition of the standard, ISO 37001:2025, was published, replacing the ISO 37001:2016 version. The changes are essentially a refinement rather than a complete overhaul: the structure and key requirements remain the same, and the impact on organisations that are already certified is limited. The main changes relate to a stronger emphasis on an anti-bribery culture (the active promotion of integrity at all levels of the organisation), clarification of the role and independence of the anti-bribery function (a term which replaces the ‘anti-bribery compliance function’ from the 2016 edition), greater involvement of senior management, a more comprehensive definition of conflict of interest, and new provisions relating to climate change and the harmonisation of the structure with other management system standards. Organisations certified to the 2016 edition have until 28 February 2027 to complete the transition to ISO 37001:2025.

The benefits of ISO 37001 certification

A properly implemented anti-bribery management system brings tangible benefits:

• demonstrating, to management, employees, customers and partners, a commitment to integrity and the implementation of internationally recognised anti-bribery measures;
• reducing the risk of corruption through preventive and detection controls;
• fostering an organisational culture based on integrity and transparency;
• building trust amongst business partners, customers and the authorities;
• a competitive advantage, including in tenders and in dealings with partners who impose compliance standards;
• in the event of a criminal investigation, evidence that the organisation has taken the necessary steps to prevent corruption;
• the possibility of integration with other management systems, such as ISO 9001 or ISO 37301 (compliance management).

.

How to obtain ISO 37001 certification with SRAC

The ISO 37001 certification process involves auditing the anti-bribery management system against the requirements of the standard.

Stages of certification

1. Submission of the request for quotation and definition of the scope of certification, including the relevant activities and locations.
2. The two-stage certification audit: a review of documentation and an on-site assessment of how the anti-bribery management system operates.
3. Addressing any non-conformities and implementing corrective actions.
4. Issuance of the ISO 37001 certificate, valid for 3 years, subject to annual surveillance audits being carried out.
5. The recertification audit (certification renewal), to extend the validity of the certificate for a further three-year period.

The cost of ISO 37001 certification

The cost of ISO 37001 certification depends on the size of the organisation, the complexity of its activities and bribery risks, the number of sites, and the scope of certification. To find out the exact cost of ISO 37001 certification, the best option is to request a personalised quote.

Why SRAC

SRAC is a certification body with extensive experience in assessing management systems, offering you a rigorous and objective audit of your anti-bribery management system. Certification by an independent body confirms to stakeholders the effectiveness of the anti-bribery measures implemented and strengthens confidence in the organisation’s integrity. SRAC is accredited by RENAR (Certificate No. SM 004) – for the certification of anti-bribery management systems in accordance with the reference standard SR ISO 37001:2025. Organisations certified by SRAC benefit from the recognition and reputation of one of the most experienced certification service providers in Romania. The SRAC certificate is internationally recognised thanks to its RENAR accreditation – a signatory to the international IAF-MLA agreement and its partnership with IQNET (The International Certification Network). 

Join the leading companies and institutions in Romania that have chosen the SRAC brand: over 10,000 certified organisations / over 25,000 certificates awarded in 30 years. From top brands to major public institutions, leading companies have chosen our services. 

Who is ISO 37001 aimed at?

ISO 37001 is aimed at any organisation wishing to prevent and manage corruption risks, whether in the public, private or non-profit sector, regardless of its size. It may be particularly relevant for organisations that take part in public tenders and procurement, that work with intermediaries and partners in markets with a high risk of corruption, that form part of supply chains with compliance requirements, or that wish to protect their reputation and integrity.