Fundamental principles and concepts of an anti-bribery management system
What the domain tests
This domain checks whether you can use ISO 37001 vocabulary precisely and explain why an ABMS is risk-based rather than a paperwork exercise. Expect questions on bribery in all its forms, the purpose of an ABMS, and how leadership, proportionality and due diligence interact.
Core concepts
- Bribery is offering, promising, giving, accepting or soliciting an advantage as an inducement for an action that is illegal, unethical or a breach of trust. It can be active or passive, direct or indirect, public or private.
- An ABMS is a set of interrelated elements-policy, objectives, processes, controls and culture-used to prevent, detect and respond to bribery.
- ISO 37001 is generic and scalable; controls must be proportionate to the organization’s bribery risk, not copied from another company.
- Top management must lead, establish policy and provide resources; an anti-bribery compliance function (ABCF) oversees the program with authority and independence.
- Due diligence applies to business associates and, where relevant, personnel; it is risk-based and documented.
- The standard requires raising concerns channels, protection against retaliation, investigation and continual improvement.
Worked example
A logistics clerk pays USD 200 to a customs official to “speed up” clearance. The company calls it a facilitation payment and not bribery because it is small and does not change the legal outcome. Under ISO 37001, the advantage is given to induce an official act, so it is bribery; size and label do not create an exception. The audit finding should cite the policy, the payment record and the lack of approval or detection control.
Traps
Treating gifts as automatically prohibited rather than controlled; assuming ISO 37001 certifies that no bribery occurs; limiting bribery to public officials; and accepting a policy that is not communicated or enforced.