Bribery distorts competition, destroys reputations, and exposes companies to serious legal risk. As global corporations and partners tighten their integrity requirements, ISO 37001 has become an essential tool for demonstrating a credible commitment to transparency. This guide explains what ISO 37001 is, how to get certified, and what the new 2025 edition means for your organization.
What is ISO 37001?
ISO 37001 is the international standard specifying the requirements for an Anti-Bribery Management System (ABMS). Its full title is “Anti-bribery management systems — Requirements with guidance for use.” It provides a framework that helps organizations prevent, detect, and respond to bribery in their activities and relationships.
The current edition is ISO 37001:2025, published on 3 February 2025, replacing the original 2016 version. It applies to any type of organization — public, private, or not-for-profit — of any size.
An important note: Certification to ISO 37001 does not guarantee that bribery will never occur, but it is a strong, credible signal of integrity and evidence that reasonable controls are in place.
What controls does ISO 37001 require?
An ABMS under ISO 37001 typically includes:
- An anti-bribery policy and the commitment of top management and the governing body.
- A bribery risk assessment based on the organization’s context.
- An anti-bribery function with clear responsibilities and operational independence.
- Due diligence on personnel, partners, third parties, and higher-risk transactions.
- Financial and non-financial controls to prevent bribery.
- A safe raising-concerns (whistleblowing) mechanism.
- Training and awareness for staff and partners.
- Investigation, monitoring, and continual improvement.
Benefits of ISO 37001
| Benefit area | Value delivered |
|---|---|
| Legal & risk | Reduces the risk of breaching anti-bribery and anti-corruption laws |
| Reputation | Demonstrates a credible integrity commitment to customers, partners, and investors |
| Market | Meets the requirements of corporations, tenders, and global supply chains |
| Governance | Strengthens transparency, internal controls, and a culture of compliance |
| ESG | Reinforces the “Governance” pillar of an ESG strategy |
Important update: ISO 37001:2025
The 2025 edition is about refinement and alignment, not reinvention — it keeps the same structure and core requirements as 2016. Key changes include:
- Anti-bribery culture: a new requirement (subclause 5.1.3) to promote a culture of integrity at all levels.
- Anti-bribery function: the term “anti-bribery compliance function” is replaced by “anti-bribery function,” with a clearer description of its responsibilities and independence.
- Conflicts of interest: more explicit guidance on identifying, assessing, and managing them.
- Climate change: new subclauses considering climate-change relevance to the ABMS.
- Harmonized Structure: adopted for easier integration with standards like ISO 37301, ISO 9001, and ISO 14001.
- Third-party due diligence: strengthened requirements for intermediaries, joint ventures, and M&A, with ongoing monitoring.
Transition roadmap: all certified sites must complete the transition to ISO 37001:2025 by 28 February 2027.
Our ISO 37001 services in Vietnam
We help organizations build a genuine, effective ABMS:
- Consulting — designing an ABMS tailored to your context and risk profile.
- Training — ISO 37001 awareness, internal auditor training, and 2025 transition courses.
- Risk assessment and due diligence process design, plus financial and non-financial controls.
- Certification-audit preparation and ongoing maintenance and improvement.
Frequently asked questions (FAQ)
1. Which organizations should adopt ISO 37001? Any organization of any size — especially those in global supply chains, tenders, or higher-risk sectors and regions.
2. How long is the certificate valid? Typically three years, with annual surveillance audits.
3. Does ISO 37001 guarantee no bribery? No. It establishes reasonable controls and demonstrates commitment, but is not an absolute guarantee.
4. We hold a 2016 certificate — what should we do? Plan your transition and complete the audit to ISO 37001:2025 by 28 February 2027.
Contact us for a business consultation
ISC Global Co., Ltd. Hotline: +84 933 096 426 – +84 868 591 260 Email: info@iscglobal.asia | van.pham@iscglobal.asia Website: iscglobal.asia | iscglobal.edu.vn
No responses yet