ISO 37001:2016 is applicable only to bribery. It sets forth management system requirements designed to help you prevent, detect and respond to bribery as well as comply with anti-bribery laws and voluntary commitments applicable to the organization’s activities.
Other aspects, such as fraud or money laundering can be included in the management system scope in accordance in accordance with relevant legislation and best-practices. ISO 37001 covers bribery:
- by the organization, its personnel or business associates acting on the organization’s behalf or for its benefit;
- of the organization, its personnel or business associates in relation to the organization’s activities.
A compliant management system must implement measures and controls to help prevent, detect, and deal with bribery. These should cover:
- anti-bribery policy;
- management leadership, commitment and responsibility;
- personnel controls and training;
- risk assessments;
- due diligence on projects and business associates;
- financial, commercial and contractual controls;
- reporting, monitoring, investigation and review;
- Corrective action and continual improvement.