Curriculum
- 2 Sections
- 36 Lessons
- Lifetime
- ISO 3700111
- 1.1Introduction to ISO 37001 and Anti-Bribery Management Systems
- 1.2Terms, Definitions, and Key Concepts in ISO 37001
- 1.3Context of the Organization (Clause 4)
- 1.4Leadership and Commitment (Clause 5)
- 1.5Planning (Clause 6)
- 1.6Support (Clause 7)
- 1.7Operation (Clause 8) – Operational Planning and Control
- 1.8Operation (Clause 8) – Reporting, Investigation, and Dealing with Bribery
- 1.9Performance Evaluation (Clause 9)
- 1.10Improvement (Clause 10)
- 1.11Integration of ISO 37001 with Other Management Systems
- ISO 19011: Guidelines for auditing management systems26
- 2.1Introduction to ISO19011
- 2.2Principles of Auditing
- 2.3Managing an Audit Program
- 2.4Establishing Audit Program Objectives
- 2.5Determining Audit Program Risks and Opportunities
- 2.6Establishing the Audit Program
- 2.7Implementing the Audit Program
- 2.8Monitoring the Audit Program
- 2.9Reviewing and Improving the Audit Program
- 2.10Initiating the Audit
- 2.11Determining Audit Feasibility
- 2.12Preparing Audit Activities
- 2.13Reviewing Documented Information
- 2.14Preparing the Audit Plan
- 2.15Assigning Work to the Audit Team
- 2.16Preparing Working Documents
- 2.17Opening Meeting
- 2.18Communication During the Audit
- 2.19Collecting and Verifying Information
- 2.20Generating Audit Findings
- 2.21Preparing Audit Conclusions
- 2.22Closing Meeting
- 2.23Preparing the Audit Report
- 2.24Completing the Audit
- 2.25Follow-Up Activities
- 2.26ISO 37001 Exam120 Minutes40 Questions
Operation (Clause 8) – Reporting, Investigation, and Dealing with Bribery
Raising Concerns and Reporting Mechanisms
A key element of ISO 37001 is providing mechanisms for individuals to report suspected or actual bribery. Organizations must establish processes that enable:
- Confidential reporting
- Anonymous reporting (where possible)
- Protection against retaliation
These mechanisms should be accessible to employees and external parties, such as suppliers or contractors.
It is not enough to have reporting channels in place; organizations must actively encourage their use. This involves:
- Building trust
- Ensuring confidentiality
- Demonstrating that reports are taken seriously
A culture where individuals feel safe to report concerns is essential for early detection of bribery.
Organizations must establish procedures for handling reports of bribery. This includes:
- Recording reports
- Assessing their validity
- Determining appropriate actions
Timely and consistent handling of reports is critical to maintaining credibility.
When bribery is suspected, organizations must conduct investigations in a controlled and objective manner. Investigations should:
- Be carried out by competent personnel
- Maintain confidentiality
- Follow documented procedures
The scope and depth of investigations will depend on the nature and severity of the issue.
Decision-Making and Outcomes
Following an investigation, organizations must determine appropriate actions. These may include:
- Disciplinary measures
- Process improvements
- Reporting to authorities
Decisions should be based on evidence and aligned with organizational policies.
Corrective Actions
When nonconformities are identified, organizations must take corrective actions to prevent recurrence. This involves:
- Identifying root causes
- Implementing corrective measures
- Monitoring effectiveness
Corrective actions strengthen the ABMS over time.
ISO 37001 requires organizations to respond appropriately to bribery incidents. This includes:
- Taking immediate action to control the situation
- Assessing the impact
- Implementing improvements
Organizations must also consider legal and regulatory requirements when responding to incidents.
Individuals involved in reporting or investigations must be treated fairly. This includes:
- Protecting whistleblowers
- Ensuring due process
- Avoiding conflicts of interest
Fair treatment enhances trust in the system.
Organizations must maintain records of:
- Reports received
- Investigations conducted
- Actions taken
These records provide evidence of compliance and support continual improvement.