ISO 37001 is an international standard that sets out requirements and guidance for implementing an anti-bribery management system (ABMS) within an organization. The standard is designed to help organizations prevent, detect, and respond to bribery, and to demonstrate their commitment to ethical business practices.
The content of ISO 37001 includes the following:
- Scope: This section defines the scope of the standard and the types of organizations that it applies to.
- Normative references: This section lists other standards and documents that are referenced in ISO 37001.
- Terms and definitions: This section provides definitions for key terms used throughout the standard.
- Context of the organization: This section requires the organization to consider its context and the needs and expectations of interested parties in developing an ABMS.
- Leadership: This section outlines the responsibilities of top management in demonstrating leadership and commitment to the ABMS.
- Planning: This section requires the organization to plan the ABMS, taking into account the risks of bribery and the legal, regulatory, and contractual requirements that apply.
- Support: This section covers the resources, competence, and communication that are required to implement and maintain the ABMS.
- Operation: This section covers the processes for identifying, assessing, and mitigating bribery risks, as well as for conducting due diligence on business associates and reporting and investigating incidents of bribery.
- Performance evaluation: This section requires the organization to monitor and measure the effectiveness of the ABMS, and to take corrective actions as necessary.
- Improvement: This section covers the processes for continually improving the ABMS, including through the use of audits and reviews.
Overall, ISO 37001 provides a framework for organizations to implement an effective ABMS that can help them prevent and detect bribery and demonstrate their commitment to ethical business practices. Compliance with the standard is voluntary, but it can help organizations to manage their reputational risk and improve their ability to compete in the global marketplace.
