Curriculum
- 2 Sections
- 36 Lessons
- Lifetime
- ISO 3700111
- 1.1Introduction to ISO 37001 and Anti-Bribery Management Systems
- 1.2Terms, Definitions, and Key Concepts in ISO 37001
- 1.3Context of the Organization (Clause 4)
- 1.4Leadership and Commitment (Clause 5)
- 1.5Planning (Clause 6)
- 1.6Support (Clause 7)
- 1.7Operation (Clause 8) – Operational Planning and Control
- 1.8Operation (Clause 8) – Reporting, Investigation, and Dealing with Bribery
- 1.9Performance Evaluation (Clause 9)
- 1.10Improvement (Clause 10)
- 1.11Integration of ISO 37001 with Other Management Systems
- ISO 19011: Guidelines for auditing management systems26
- 2.1Introduction to ISO19011
- 2.2Principles of Auditing
- 2.3Managing an Audit Program
- 2.4Establishing Audit Program Objectives
- 2.5Determining Audit Program Risks and Opportunities
- 2.6Establishing the Audit Program
- 2.7Implementing the Audit Program
- 2.8Monitoring the Audit Program
- 2.9Reviewing and Improving the Audit Program
- 2.10Initiating the Audit
- 2.11Determining Audit Feasibility
- 2.12Preparing Audit Activities
- 2.13Reviewing Documented Information
- 2.14Preparing the Audit Plan
- 2.15Assigning Work to the Audit Team
- 2.16Preparing Working Documents
- 2.17Opening Meeting
- 2.18Communication During the Audit
- 2.19Collecting and Verifying Information
- 2.20Generating Audit Findings
- 2.21Preparing Audit Conclusions
- 2.22Closing Meeting
- 2.23Preparing the Audit Report
- 2.24Completing the Audit
- 2.25Follow-Up Activities
- 2.26ISO 37001 Exam120 Minutes40 Questions
Terms, Definitions, and Key Concepts in ISO 37001
Terms, Definitions, and Key Concepts in ISO 37001
One of the most critical terms is bribery, defined as the offering, promising, giving, accepting, or soliciting of an undue advantage of any value, whether financial or non-financial, directly or indirectly, in violation of applicable law.
Another important concept is the Anti-Bribery Management System (ABMS), which refers to the set of interrelated or interacting elements of an organization used to establish anti-bribery policies, objectives, and processes.
The term organization refers to any entity implementing the standard, including companies, partnerships, charities, or government bodies.
Interested parties (or stakeholders) are individuals or organizations that can affect, be affected by, or perceive themselves to be affected by the organization’s decisions and activities. These may include employees, customers, suppliers, regulators, and shareholders.
Top management plays a crucial role in ISO 37001. It refers to the person or group of people who direct and control the organization at the highest level. Their commitment is essential for the success of the ABMS.
The compliance function is another key concept. This refers to the role or function responsible for overseeing the implementation and operation of the anti-bribery management system.
Due diligence is the process of assessing the nature and extent of bribery risk in relation to specific transactions, projects, or business relationships. It is a critical component of risk management.
Business associates include parties with whom the organization has business relationships, such as suppliers, contractors, agents, consultants, and joint venture partners.
The concept of risk-based thinking is central to ISO 37001. Organizations are required to identify, analyze, and evaluate bribery risks and implement appropriate controls to mitigate them.
Another important concept is continual improvement, which involves ongoing efforts to enhance the effectiveness of the ABMS.
Understanding these terms
Understanding these terms ensures consistent interpretation of the standard and helps organizations implement its requirements effectively. It also ensures alignment with other ISO standards that share the same High-Level Structure.
These definitions are not merely theoretical; they guide practical implementation. For example, understanding what constitutes a “business associate” helps determine the scope of due diligence, while clarity on “bribery” ensures appropriate controls are in place.
Mastering these foundational concepts is essential before moving on to the detailed clauses of ISO 37001, as they provide the language and framework used throughout the standard.