ISO 37001 Certification
ISO 37001:2025
ISO 37001 Certification helps organizations establish, implement, maintain and continually improve an Anti-Bribery Management System (ABMS). It provides a structured framework for preventing, detecting and addressing bribery and managing bribery-related risks.
What is ISO 37001?
ISO 37001 is an internationally recognized standard for Anti-Bribery Management Systems. It provides requirements and guidance to help organizations establish a systematic approach to preventing, detecting and responding to bribery.
ISO 37001:2025 is the current and updated edition of the standard (replacing ISO 37001:2016). It is designed to be applicable to organizations of different sizes, sectors and geographic locations.
The standard can be implemented as a standalone management system or integrated with other management systems used by an organization.
Why is ISO 37001 Certification Important?
Bribery can expose organizations to legal, financial, operational and reputational risks. A systematic anti-bribery management approach can help organizations establish appropriate policies, controls and processes for managing these risks.
ISO 37001:2025 provides an enhanced framework for organizations to foster a strong anti-bribery culture, manage conflicts of interest, and demonstrate their commitment to ethical business practices.
Benefits of ISO 37001 Certification
Provides a structured Anti-Bribery Management System.
Helps identify and assess bribery risks across the organization.
Supports implementation of effective anti-bribery controls.
Strengthens organizational anti-bribery culture and policies.
Encourages appropriate due diligence processes for relationships.
Supports reporting and investigation of bribery concerns.
Improves awareness and training related to anti-bribery practices.
Strengthens transparency and management of conflicts of interest.
Builds confidence among customers, suppliers and other interested parties.
Supports continual improvement of anti-bribery controls.
Who Can Obtain ISO 37001 Certification?
ISO 37001 can be implemented by organizations of different sizes and sectors. It can be relevant to organizations that want to establish systematic controls for managing bribery risks.
ISO 37001 certification may be relevant for:
- Manufacturing companies
- Construction and infrastructure organizations
- Engineering companies
- IT and technology organizations
- Financial and professional service organizations
- Trading and distribution companies
- Healthcare organizations
- Government-related organizations
- Non-governmental organizations
- Large corporations
- Small and medium-sized enterprises
Key Elements of ISO 37001
ISO 37001:2025 establishes a management system framework covering important areas of anti-bribery risk management.
Understanding internal and external issues (including climate and sustainability considerations), interested parties and the scope of the ABMS.
Establishing management commitment, anti-bribery policy, ethical culture and responsibilities.
Identifying and assessing bribery risks and conflicts of interest relevant to the organization.
Applying appropriate due diligence to relevant business associates, transactions and other relationships.
Establishing appropriate controls over financial processes and transactions.
Establishing controls over relevant procurement, commercial and operational activities.
Providing appropriate anti-bribery awareness and training for personnel and business associates.
Establishing processes for reporting concerns, protecting whistleblowers and dealing with suspected bribery.
Evaluating the effectiveness of the Anti-Bribery Management System.
Addressing nonconformities and continually improving the ABMS.
ISO 37001:2025 – Anti-Bribery Management System
ISO 37001:2025 is the latest published edition of the Anti-bribery management systems – Requirements with guidance for use standard, updating and replacing the first edition (ISO 37001:2016).
The updated standard aligns with the latest ISO Harmonized Structure and places stronger emphasis on cultivating an anti-bribery culture, addressing conflicts of interest, and integrating climate action considerations within the organizational context.
ISO 37001:2025 addresses bribery risks involving an organization, its personnel and relevant business associates, according to the organization's context and risk exposure.
Bribery Risk Assessment
Risk assessment is an important component of an effective Anti-Bribery Management System. Organizations should assess bribery risks according to relevant activities, relationships, locations and business circumstances.
The results of the risk assessment can help determine the appropriate level of controls, due diligence, monitoring and other anti-bribery measures.
Risk assessments should be reviewed periodically and when significant changes occur that may affect the organization's bribery risk profile.
Due Diligence and Business Associates
Organizations may work with agents, intermediaries, suppliers, contractors, consultants, partners and other business associates. Appropriate due diligence can help an organization understand and manage bribery risks associated with relevant relationships.
The level and extent of due diligence should be appropriate to the organization's identified bribery risks and circumstances.
ISO 37001 Certification Process
The certification process generally involves several stages to assess whether an organization's Anti-Bribery Management System meets the applicable requirements.
The organization submits an application for ISO 37001 certification.
The organization's activities, locations and ABMS scope are reviewed.
The organization's readiness and documented ABMS are assessed.
The implementation and effectiveness of the ABMS are evaluated.
Identified nonconformities are addressed by the organization.
The certification decision is completed based on the audit results.
Where certification requirements are met, the organization receives its ISO 37001 certificate.
Ongoing surveillance activities may be conducted according to the applicable certification scheme.
ISO 37001 Certification Requirements
Organizations seeking ISO 37001:2025 certification should establish and maintain an Anti-Bribery Management System appropriate to their organizational context and bribery risks.
Important areas include:
- Defining the scope of the ABMS
- Establishing an anti-bribery policy and promoting an ethical culture
- Demonstrating leadership commitment and governance
- Conducting regular bribery risk assessments
- Identifying and managing conflicts of interest
- Establishing appropriate anti-bribery objectives
- Implementing financial and non-financial controls
- Applying appropriate due diligence on personnel and business associates
- Managing gifts, hospitality, donations and related benefits appropriately
- Providing anti-bribery training and awareness
- Establishing confidential reporting and investigation processes
- Monitoring and evaluating ABMS performance
- Conducting internal audits and management reviews
- Managing nonconformities and corrective actions
- Continually improving the Anti-Bribery Management System
ISO 37001 and Ethical Business Practices
ISO 37001 provides a management-system approach for organizations seeking to strengthen their anti-bribery controls and promote responsible business practices.
The standard supports organizations in establishing policies, responsibilities, controls, risk assessment, due diligence, training, reporting and monitoring processes appropriate to their circumstances.
Certification does not eliminate the possibility of bribery. Instead, it demonstrates that the organization's management system has been assessed against the applicable requirements of the standard.
Why Choose BMG Certification?
BMG Certification provides certification-related services for organizations seeking to demonstrate conformity with applicable management system standards.
Our approach focuses on understanding the organization's Anti-Bribery Management System, assessing conformity against ISO 37001:2025 requirements and supporting a structured certification or transition process.
Organizations can use ISO 37001 certification to demonstrate their commitment to systematic anti-bribery management, transparency and continual improvement.
ISO 37001 Certification FAQs
What is ISO 37001 certification?
ISO 37001 certification demonstrates that an organization's Anti-Bribery Management System has been assessed against the applicable requirements of ISO 37001 by a certification body.
What is the current version of ISO 37001?
ISO 37001:2025 is the current published edition of the Anti-Bribery Management System standard, which replaces the earlier ISO 37001:2016 version.
Who can implement ISO 37001?
Organizations of different sizes and sectors can implement ISO 37001 according to their organizational context and bribery risk profile.
Does ISO 37001 guarantee that bribery will never occur?
No. ISO 37001 provides a management framework for preventing, detecting and responding to bribery risks. Certification does not guarantee that bribery incidents can never occur.
What does an Anti-Bribery Management System cover?
An ABMS can include anti-bribery policies, risk assessment, conflict of interest controls, due diligence, financial and non-financial controls, training, reporting, investigation, monitoring and continual improvement.
Is ISO 37001 certification mandatory?
ISO 37001 certification is generally voluntary. However, customer requirements, contracts, tenders, regulatory expectations or business conditions may make certification relevant to an organization.
Get ISO 37001:2025 Certification
Establish a structured Anti-Bribery Management System and demonstrate your organization's commitment to preventing bribery, strengthening controls and continually improving ethical business practices.
Contact BMG Certification to learn more about the ISO 37001:2025 certification process.
Related ISO Certifications
Explore other management system certification standards offered by BMG Certification: