ISO 37001 - Anti-bribery management

ISO 37001 is the international standard for anti-bribery management.
Initially published in 2016 and then updated in 2025, ISO 37001 helps organizations establish, implement, maintain, and improve an anti-bribery management system (ABMS).
The standard is designed to help organizations prevent, detect, and respond to bribery, as well as comply with applicable anti-bribery laws and voluntary commitments. ISO 37001 requires the implementation of an anti-bribery policy, establishing objectives, conducting bribery risk assessments, performing due diligence on projects and business relationships, implementing financial and non-financial controls, establishing reporting mechanisms and investigating suspected and actual bribery.
ISO 37001 is applicable to organizations of all types and sizes, across all sectors and geographies. It is used by private companies, public institutions, and non-profits that want to strengthen integrity, demonstrate ethical business conduct, and build trust with stakeholders.
RIGCERT provides accredited certification services for anti-bribery management systems in accordance with ISO 37001. Our certification process is impartial, transparent, and carried out by experienced professionals who understand the challenges of compliance, governance, and ethical business.
Whether the objective is to improve internal controls, reduce corruption risks, or enhance reputation and access to global markets, ISO 37001 certification can support your organization’s commitment to integrity.
ISO 37001 is the international standard that sets out the requirements for an Anti-Bribery Management System (ABMS). This system can be implemented by private companies, public sector institutions, and not-for-profit organizations, regardless of their size or area of activity.
The standard addresses both bribery committed by the organization and bribery directed toward the organization.
Among other requirements, ISO 37001 expects the organization to document an anti-bribery policy, set anti-bribery objectives, conduct bribery risk assessments at planned intervals, and ensure that personnel are aware of bribery risks and the consequences of noncompliance.
Due diligence, financial and non-financial controls, whistleblowing mechanisms, and controls related to gifts, hospitality, donations, and other advantages are all key components of an effective anti-bribery management system.
The leadership of the organization is expected to demonstrate commitment to a culture of integrity and to promote an environment where individuals feel confident to report concerns without fear of retaliation.
As with any management system, internal audits and management reviews are essential for maintaining and improving the effectiveness of the ABMS.
ISO 37001 certification for an Anti-Bribery Management System (ABMS) can be obtained by an organization after the successful completion of a two-stage audit conducted by independent and qualified auditors. This audit evaluates whether the organization’s ABMS is effectively implemented and in conformity with the requirements of ISO 37001.
The certification is valid for three years, during which the organization is subject to annual surveillance audits. These audits verify that the anti-bribery management system remains functional, effective, and aligned with the organization’s ongoing efforts to prevent bribery and ensure compliance with relevant legal and ethical obligations.
If the organization fails to complete surveillance audits on time, or if major nonconformities identified during surveillance are not properly addressed, the certification may be suspended or withdrawn.
At the conclusion of the three-year certification cycle, the organization may choose to undergo a recertification audit. This process is similar to the initial certification audit and serves to confirm that the ABMS continues to be effective and that the organization maintains its commitment to anti-bribery compliance and ethical conduct.
We provide accredited certification services for Anti-Bribery Management Systems in accordance with ISO 37001. Our certification process is tailored to the structure, operational context, and compliance needs of your organization, ensuring that the assessment is both efficient and relevant to your anti-bribery goals.
RIGCERT is accredited by ESYD, the Hellenic Accreditation Body, which guarantees that your ISO 37001 certificate is internationally recognized by authorities, customers, and business partners. As a founding member of EA (European co-operation for Accreditation) and IAF (International Accreditation Forum), ESYD ensures global recognition and trust for your certification.
Working with RIGCERT means collaborating with experienced professionals who understand bribery risks, legal and regulatory expectations, and the practical challenges of implementing anti-bribery measures. We are committed to delivering impartial, transparent, and value-focused certification services that go beyond simple compliance.