Curriculum
- 2 Sections
- 36 Lessons
- Lifetime
- ISO 3700111
- 1.1Introduction to ISO 37001 and Anti-Bribery Management Systems
- 1.2Terms, Definitions, and Key Concepts in ISO 37001
- 1.3Context of the Organization (Clause 4)
- 1.4Leadership and Commitment (Clause 5)
- 1.5Planning (Clause 6)
- 1.6Support (Clause 7)
- 1.7Operation (Clause 8) – Operational Planning and Control
- 1.8Operation (Clause 8) – Reporting, Investigation, and Dealing with Bribery
- 1.9Performance Evaluation (Clause 9)
- 1.10Improvement (Clause 10)
- 1.11Integration of ISO 37001 with Other Management Systems
- ISO 19011: Guidelines for auditing management systems26
- 2.1Introduction to ISO19011
- 2.2Principles of Auditing
- 2.3Managing an Audit Program
- 2.4Establishing Audit Program Objectives
- 2.5Determining Audit Program Risks and Opportunities
- 2.6Establishing the Audit Program
- 2.7Implementing the Audit Program
- 2.8Monitoring the Audit Program
- 2.9Reviewing and Improving the Audit Program
- 2.10Initiating the Audit
- 2.11Determining Audit Feasibility
- 2.12Preparing Audit Activities
- 2.13Reviewing Documented Information
- 2.14Preparing the Audit Plan
- 2.15Assigning Work to the Audit Team
- 2.16Preparing Working Documents
- 2.17Opening Meeting
- 2.18Communication During the Audit
- 2.19Collecting and Verifying Information
- 2.20Generating Audit Findings
- 2.21Preparing Audit Conclusions
- 2.22Closing Meeting
- 2.23Preparing the Audit Report
- 2.24Completing the Audit
- 2.25Follow-Up Activities
- 2.26ISO 37001 Exam120 Minutes40 Questions
Performance Evaluation (Clause 9)
Monitoring and Measurement
Clause 9 focuses on evaluating the effectiveness of the Anti-Bribery Management System. Organizations must determine:
- What needs to be monitored
- Methods for monitoring and measurement
- When monitoring should occur
- Who is responsible
Monitoring activities may include reviewing transactions, analyzing trends, and assessing compliance with policies.
Organizations must regularly review the performance of their ABMS to ensure it is functioning as intended. This includes:
- Evaluating risk assessments
- Reviewing incident reports
- Assessing control effectiveness
Regular reviews help identify areas for improvement.
Although detailed auditing methodologies are addressed separately, ISO 37001 requires organizations to conduct internal audits to verify that the ABMS:
- Conforms to requirements
- Is effectively implemented
Internal audits provide an independent perspective on system performance.
Management Review
Top management must review the ABMS at planned intervals. The management review should consider:
- Status of actions from previous reviews
- Changes in internal and external issues
- Information on performance and effectiveness
- Opportunities for improvement
Management reviews ensure that leadership remains engaged and informed.
Inputs to Management Review
Typical inputs include:
- Results of monitoring and measurement
- Audit findings
- Reports of bribery incidents
- Feedback from stakeholders
These inputs provide a comprehensive view of system performance.
Outputs of Management Review
Outputs may include decisions related to:
- Improvements to the ABMS
- Resource allocation
- Changes to policies or objectives
These decisions drive continual improvement.
Effectiveness is measured by how well the ABMS prevents, detects, and responds to bribery. Indicators may include:
- Reduction in incidents
- Increased reporting
- Improved compliance rates
Evaluation should be data-driven and objective.