I85PREP
⌘ K
ISO 37001 LI study materials
ISO 37001 LI study resources

ISO 37001 LI practice questions

One question at a time. Build your ISO 37001 LI understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Fundamental concepts and principles of anti-bribery management

In ISO 37001, what is the primary purpose of an anti-bribery management system (ABMS)?

  1. To help an organization prevent, detect and respond to bribery Correct answer.
  2. To certify that an organization has never paid a bribe
  3. To guarantee that no employee will ever offer an advantage
  4. To replace the organization's legal compliance obligations

Explanation

ISO 37001 defines an ABMS as a set of interrelated elements used to help an organization prevent, detect and respond to bribery. The standard is a management tool, not a guarantee of outcomes or a substitute for legal duties.

Question 2Fundamental concepts and principles of anti-bribery management

Which term does ISO 37001 use to describe the offer, promise, giving, demand or acceptance of an undue advantage of any value?

  1. Conflict of interest
  2. Facilitation payment
  3. Bribery Correct answer.
  4. Extortion

Explanation

Bribery in ISO 37001 covers the offering, promising, giving, demanding or accepting of an undue advantage of any value, directly or indirectly. It is broader than cash payments and includes non-financial advantages.

Question 3Fundamental concepts and principles of anti-bribery management

According to ISO 37001, bribery can be committed by which parties?

  1. Only third parties acting on the organization's behalf
  2. Only the organization's top management
  3. The organization, its personnel, or its business associates Correct answer.
  4. Only the organization's employees

Explanation

The standard recognizes that bribery risk may arise through the organization itself, its personnel, or its business associates acting for or on its behalf. This is why due diligence on business associates is a required element.

Question 4Fundamental concepts and principles of anti-bribery management

What does ISO 37001 mean by an 'undue advantage'?

  1. Any payment made to a government official
  2. Any gift of monetary value above a fixed threshold
  3. Any advantage given with written approval
  4. Any advantage that is not legally due to the recipient Correct answer.

Explanation

An undue advantage is something to which the recipient is not lawfully entitled. The concept is not limited to money or to public officials, and it can include non-financial benefits.

Question 5Fundamental concepts and principles of anti-bribery management

Which concept describes a situation where a person's judgment could be improperly influenced by competing personal, financial or other interests?

  1. Fraud
  2. Money laundering
  3. Bribery
  4. Conflict of interest Correct answer.

Explanation

A conflict of interest arises where personal, financial or other interests could improperly influence judgment in the performance of duties. ISO 37001 treats managing conflicts of interest as a supporting control because they can enable bribery.

Question 6Fundamental concepts and principles of anti-bribery management

What is a 'facilitation payment' in the context of ISO 37001?

  1. A payment to expedite a routine action that the payer is already entitled to Correct answer.
  2. A bonus paid to an employee for meeting sales targets
  3. A fee paid to a consultant for legitimate advisory services
  4. A payment made to a charity as part of a social responsibility programme

Explanation

Facilitation payments are small payments made to secure or expedite the performance of a routine action to which the payer is already entitled. ISO 37001 expects organizations to prohibit or control them, since they are often treated as bribery under applicable law.

Question 7Fundamental concepts and principles of anti-bribery management

What does ISO 37001 call an external party with whom the organization has, or plans to establish, a business relationship?

  1. Business associate Correct answer.
  2. Stakeholder
  3. Regulator
  4. Interested party

Explanation

The standard uses 'business associate' for external parties such as contractors, suppliers, consultants and agents with whom the organization has or plans a business relationship. They are a key focus because they can create bribery risk on the organization's behalf.

Question 8Fundamental concepts and principles of anti-bribery management

Which statement best describes the relationship between ISO 37001 and national anti-bribery law?

  1. ISO 37001 overrides conflicting national anti-bribery law
  2. ISO 37001 applies only to organizations operating internationally
  3. ISO 37001 is only relevant where bribery is not criminalized
  4. ISO 37001 supplements legal requirements and does not replace them Correct answer.

Explanation

ISO 37001 is a management system standard that helps organizations meet their obligations; it does not displace or override applicable law. Organizations must still comply with the laws and regulations that bind them.

Question 9Fundamental concepts and principles of anti-bribery management

A purchasing manager is offered a luxury holiday by a supplier shortly before a major contract award. Which ISO 37001 concept is most directly engaged?

  1. A facilitation payment to expedite routine approval
  2. A legitimate marketing expense
  3. An undue advantage offered to influence a business decision Correct answer.
  4. A conflict of interest that requires no further action

Explanation

The holiday is something the manager is not entitled to and is timed to influence a decision, so it fits the definition of an undue advantage. The organization's controls should require refusal, reporting and review of the supplier relationship.

Question 10Fundamental concepts and principles of anti-bribery management

An organization's risk assessment identifies that a customs agent could make small payments to border officials to speed clearance. What does ISO 37001 require the organization to do with this identified risk?

  1. Terminate all trade with the country immediately
  2. Ignore it because small payments are customary in the region
  3. Evaluate the risk and implement proportionate controls to address it Correct answer.
  4. Record it only in the financial statements

Explanation

ISO 37001 requires bribery risk to be assessed and then addressed through proportionate controls such as due diligence, contractual terms and training. Customary practice does not remove the legal and standards-based obligation.

Question 11Fundamental concepts and principles of anti-bribery management

An organization wants to appoint a sales agent in a high-risk market. Which action best reflects the ISO 37001 approach to business associates?

  1. Rely on the agent's own written assurance that it will not pay bribes
  2. Conduct bribery due diligence on the agent before appointment and apply proportionate controls Correct answer.
  3. Delegate all anti-bribery responsibility to the agent
  4. Sign the contract first and conduct due diligence only if a problem arises

Explanation

ISO 37001 expects due diligence on business associates proportionate to the bribery risk, carried out before commitment where practicable. Due diligence informs the level of contractual and monitoring controls that follow.

Question 12Fundamental concepts and principles of anti-bribery management

What does ISO 37001 mean by 'reasonable and proportionate' anti-bribery measures?

  1. Measures that eliminate all bribery risk regardless of cost
  2. The minimum number of controls required by law
  3. Controls identical to those used by larger competitors
  4. Controls sized to the organization's bribery risks and context Correct answer.

Explanation

The standard is risk-based: measures should be proportionate to the nature and scale of the bribery risks the organization faces. This allows smaller or lower-risk organizations to apply simpler controls than high-risk multinationals.

Question 13Fundamental concepts and principles of anti-bribery management

Which of the following best describes the role of 'top management' in an ISO 37001 ABMS?

  1. Delegating all anti-bribery decisions to the compliance function
  2. Reviewing only financial statements related to bribery
  3. Providing leadership and demonstrating commitment to the ABMS Correct answer.
  4. Approving individual gifts after they have been given

Explanation

ISO 37001 places leadership responsibility on top management, which must demonstrate commitment and ensure the ABMS is integrated into the organization's processes. Delegation to a compliance function does not remove this leadership duty.

Question 14Fundamental concepts and principles of anti-bribery management

How does ISO 37001 distinguish the role of the 'compliance function' from that of the 'governing body'?

  1. Both roles must always be performed by the same person
  2. The compliance function has authority to change the organization's strategy
  3. The governing body oversees the ABMS while the compliance function operates it day to day Correct answer.
  4. The compliance function provides oversight of the governing body

Explanation

The governing body provides oversight of the ABMS, while the compliance function is responsible for the day-to-day operation and coordination of the system. Keeping these roles distinct supports independence and effective challenge.

Question 15Fundamental concepts and principles of anti-bribery management

An employee reports a suspected bribe to a manager, who ignores it. Which ISO 37001 element is most directly undermined?

  1. The financial reporting calendar
  2. The procurement of office supplies
  3. The organization's marketing strategy
  4. The raising of concerns in good faith and protection against retaliation Correct answer.

Explanation

ISO 37001 requires channels for raising concerns and protection of those who report in good faith. A manager ignoring a report undermines the speak-up process and the culture of integrity the standard promotes.

Question 16Fundamental concepts and principles of anti-bribery management

What is the purpose of an anti-bribery policy in an ISO 37001 ABMS?

  1. To set out the organization's commitments and expectations regarding bribery Correct answer.
  2. To replace the need for bribery risk assessment
  3. To serve as the organization's annual financial report
  4. To list the names of employees suspected of bribery

Explanation

The anti-bribery policy states the organization's commitment to prohibit bribery and sets expectations for personnel and business associates. It is a foundation document, but it does not replace risk assessment or other controls.

Question 17Fundamental concepts and principles of anti-bribery management

An organization provides anti-bribery training only to its senior managers. Which ISO 37001 expectation does this most clearly fail to meet?

  1. Training that is repeated every five years
  2. Training that is delivered only in a single language
  3. Training proportionate to roles and bribery risk across relevant personnel Correct answer.
  4. Training that is outsourced to external providers

Explanation

ISO 37001 expects training and awareness for personnel whose roles carry bribery risk, proportionate to that risk. Limiting training to senior managers leaves higher-risk operational staff without the necessary awareness.

Question 18Fundamental concepts and principles of anti-bribery management

Which of the following is an example of a financial control that supports an ISO 37001 ABMS?

  1. Publishing the annual marketing plan
  2. Segregation of duties and approval thresholds for payments Correct answer.
  3. Renewing the office lease on time
  4. Holding an annual staff social event

Explanation

Financial controls such as segregation of duties, approval thresholds and accurate records help prevent and detect bribery. ISO 37001 expects such controls to be applied to transactions and relationships with bribery risk.

Question 19Fundamental concepts and principles of anti-bribery management

Why does ISO 37001 require the organization to maintain documented information about its ABMS?

  1. To provide evidence that the ABMS is operating as intended and to support traceability Correct answer.
  2. To satisfy marketing claims about certification
  3. To replace the need for management review
  4. To increase the volume of paperwork for auditors

Explanation

Documented information provides evidence of conformity and supports the effective operation and continual improvement of the ABMS. It enables traceability of decisions such as due diligence and approvals.

Question 20Fundamental concepts and principles of anti-bribery management

An organization detects a bribery incident. Which ISO 37001 response best reflects the standard's expectations?

  1. Conceal the incident to protect the organization's reputation
  2. Wait until the next external audit to address it
  3. Investigate, respond appropriately, and take action to prevent recurrence Correct answer.
  4. Dismiss the responsible employee without any investigation

Explanation

ISO 37001 expects organizations to have processes for investigating and responding to bribery incidents and for taking corrective action. Concealment or action without investigation undermines both accountability and learning.

Question 21Fundamental concepts and principles of anti-bribery management

How does ISO 37001 treat gifts, hospitality and donations?

  1. They require no records if their value is low
  2. They should be subject to controls proportionate to bribery risk Correct answer.
  3. They are always prohibited in every circumstance
  4. They are permitted whenever the recipient is a private company

Explanation

ISO 37001 does not ban gifts, hospitality and donations outright; it expects them to be controlled so they are not used to obtain an undue advantage. Controls commonly include limits, approval and record-keeping.

Question 22Fundamental concepts and principles of anti-bribery management

An organization's due diligence on a high-risk intermediary was superficial, and the intermediary later paid a bribe. What does this scenario best illustrate about ISO 37001?

  1. That certification guarantees future conduct
  2. That due diligence depth should match the assessed bribery risk Correct answer.
  3. That bribery risk can be eliminated by contractual clauses alone
  4. That intermediaries are outside the scope of the ABMS

Explanation

ISO 37001 requires due diligence proportionate to risk; for high-risk associates, a superficial check is inadequate. Contractual clauses support but cannot substitute for effective risk-based due diligence.

Question 23Fundamental concepts and principles of anti-bribery management

A compliance officer reports directly to the chief executive but the chief executive also chairs the committee that approves high-risk transactions. Which ISO 37001 concern does this arrangement raise?

  1. Independence and authority of the compliance function may be compromised Correct answer.
  2. The organization has no business associates
  3. The organization has too many documented procedures
  4. The compliance officer lacks sufficient training budget

Explanation

ISO 37001 expects the compliance function to have authority and independence appropriate to its role. Where the same leader both controls high-risk approvals and oversees the compliance officer, effective challenge and independence may be compromised.

Question 24Fundamental concepts and principles of anti-bribery management

Which statement best captures how ISO 37001 treats the relationship between bribery prevention and the organization's broader ethical culture?

  1. The ABMS is purely a set of written procedures unrelated to culture
  2. The ABMS should reinforce a culture in which bribery is unacceptable and concerns can be raised Correct answer.
  3. Culture is irrelevant once controls are documented
  4. Ethical culture is the sole responsibility of the compliance function

Explanation

ISO 37001 links the management system to behaviour and culture, including leadership commitment and speak-up arrangements. Documented controls alone are insufficient if personnel do not feel able to challenge or report bribery.

Question 25Fundamental concepts and principles of anti-bribery management

An organization applies identical anti-bribery controls across all countries, ignoring differences in local bribery risk. Which ISO 37001 principle is most clearly neglected?

  1. The need to train all personnel annually
  2. The requirement to document management review
  3. The risk-based approach to designing controls Correct answer.
  4. The rule that policies must be published publicly

Explanation

ISO 37001 is risk-based, so controls should reflect the differing bribery risks across the organization's operations. Uniform controls may overburden low-risk areas while under-protecting high-risk ones.

Question 26Fundamental concepts and principles of anti-bribery management

Under ISO 37001, what does the term 'bribery' encompass beyond the direct offering of money to a public official?

  1. Only payments made directly by the organization's own employees
  2. Only transactions that exceed a defined monetary threshold set by the governing body
  3. Any offering, promising, giving or authorizing of an advantage, whether financial or not, to obtain an improper benefit Correct answer.
  4. Only conduct that has already been proven to be illegal in a court of law

Explanation

ISO 37001 defines bribery broadly as the offering, promising, giving, accepting or soliciting of an undue advantage of any value, directly or indirectly, to obtain or retain an improper benefit. The standard deliberately avoids limiting bribery to cash payments or to conduct already adjudicated as criminal, so non-financial advantages and indirect channels are covered.

Question 27Fundamental concepts and principles of anti-bribery management

An organization's ABMS is being designed. Top management delegates all anti-bribery decision-making to a junior administrator with no budget and no access to senior leaders. Which ISO 37001 principle is most directly compromised?

  1. The requirement that the organization conduct periodic internal audits
  2. The requirement that documented information be retained for a defined period
  3. The expectation that gifts and hospitality be recorded in a register
  4. The expectation that the anti-bribery function be given adequate authority, resources and independence Correct answer.

Explanation

ISO 37001 expects the function responsible for the ABMS to be assigned authority, resources and independence sufficient to operate effectively. Delegating responsibility to someone without budget, seniority or access strips the function of that authority and undermines oversight. Document retention and gift registers are separate controls that do not address the delegation problem described.

Question 28Fundamental concepts and principles of anti-bribery management

A company's anti-bribery policy states strong commitments but is written only in English, is not summarized for the local workforce, and is never communicated to business partners. Which ISO 37001 expectation about the anti-bribery policy is most clearly unmet?

  1. The policy must be signed by every employee as a condition of continued employment
  2. The policy must be appropriate to the organization's purpose and communicated and made available to relevant persons Correct answer.
  3. The policy must be reviewed by an external certification body before release
  4. The policy must include a list of every sanctioned country and entity

Explanation

ISO 37001 requires the anti-bribery policy to be appropriate to the organization's purpose and to be communicated and made available to employees and, where relevant, external parties. A policy that cannot be understood by the local workforce and never reaches partners fails that communication expectation. External pre-approval, country lists and mandatory signatures are not requirements of the standard.

Question 29Fundamental concepts and principles of anti-bribery management

A risk assessment identifies that a joint venture partner will control procurement in a high-risk jurisdiction. The organization has done no due diligence on the partner and has no contractual anti-bribery terms. Which combination of ISO 37001 elements is most directly missing?

  1. Management review and internal audit
  2. Documented information control and records retention
  3. Due diligence on the external party and anti-bribery provisions in the relationship Correct answer.
  4. Incident investigation and disciplinary procedure

Explanation

ISO 37001 expects proportionate due diligence on external parties before entering a relationship and appropriate anti-bribery commitments built into the relationship, such as contractual terms. Where a partner controls high-risk procurement, skipping both leaves the organization exposed through the partner's conduct. Management review, investigation and records control are separate elements that do not substitute for pre-relationship diligence and contractual safeguards.

Question 30Initiation of an ABMS implementation

An organization is beginning the initial planning of an anti-bribery management system (ABMS). Which activity best represents the 'initiation' phase rather than later implementation work?

  1. Securing top management commitment and defining the ABMS scope and mandate Correct answer.
  2. Conducting internal audits of bribery controls across all business units
  3. Training all employees on the whistleblowing channel procedures
  4. Monitoring the effectiveness of due diligence on high-risk intermediaries

Explanation

Initiation establishes the foundation: leadership commitment, a clear mandate, and a defined scope before detailed controls are built. Auditing, training, and monitoring are downstream implementation and operation activities that depend on an initiated system. The initiation phase is about authorizing and framing the ABMS.

Question 31Initiation of an ABMS implementation

When defining the scope of an ABMS at the outset, which approach best aligns with the intent of ISO 37001?

  1. Excluding overseas subsidiaries to keep the initial project manageable
  2. Limiting scope to the legal department because it handles compliance matters
  3. Defining scope around the bribery risks the organization actually faces and can control Correct answer.
  4. Scoping only to activities that regulators have already publicly criticized

Explanation

Scope should reflect the bribery risks relevant to the organization's activities, including those it can control or influence. Narrowing scope to one function, geography, or past criticism leaves material risks unmanaged. A risk-based scope is central to a credible ABMS.

Question 32Initiation of an ABMS implementation

Which output is the most appropriate deliverable from the initiation stage of an ABMS project?

  1. A completed bribery risk assessment with quantified residual ratings
  2. A tested whistleblowing hotline with recorded case outcomes
  3. A signed anti-bribery policy distributed to all third parties
  4. An approved project mandate with governance, resources, and a high-level roadmap Correct answer.

Explanation

Initiation produces the mandate that authorizes the project, assigns governance and resources, and sets a roadmap for later phases. Risk assessment, policy issuance, and hotline operation are subsequent activities that the mandate enables. Without an approved mandate, later work lacks authority and resourcing.

Question 33Initiation of an ABMS implementation

A newly appointed compliance lead wants to initiate an ABMS but has no budget or executive sponsor. What is the most effective first step?

  1. Engage top management to secure sponsorship, mandate, and resources Correct answer.
  2. Draft the full set of anti-bribery procedures and circulate them for comment
  3. Commission an external audit of the organization's bribery exposure
  4. Launch a company-wide awareness campaign on bribery risks

Explanation

Initiation requires visible top management commitment and the resources to sustain the system. Without a sponsor and mandate, drafting procedures, audits, and campaigns lack authority and may not be adopted. Securing leadership backing is the enabling first step.

Question 34Initiation of an ABMS implementation

Which factor most strongly justifies initiating an ABMS in a mid-sized company operating in several high-corruption markets?

  1. Peer companies have published sustainability reports referencing ethics
  2. An ABMS certificate would automatically increase product sales
  3. The company has experienced or foresees material bribery exposure and legal risk Correct answer.
  4. Regulators require every company to hold a specific certification

Explanation

The strongest business case for an ABMS is exposure to bribery risk and the associated legal, financial, and reputational consequences. Certification is not generally mandated as a universal legal requirement and does not guarantee commercial gains. Peer reporting trends are weak drivers compared with actual risk.

Question 35Initiation of an ABMS implementation

In the initiation phase, what is the primary purpose of a gap analysis against ISO 37001 requirements?

  1. To identify where current practices fall short of the standard's requirements Correct answer.
  2. To replace the need for a bribery risk assessment
  3. To satisfy external auditors that no changes are required
  4. To certify the organization immediately without further work

Explanation

A gap analysis compares existing arrangements with the standard's requirements to reveal what must be built or strengthened. It informs planning and prioritization but does not itself certify the organization. It complements, rather than replaces, risk assessment.

Question 36Initiation of an ABMS implementation

Who should formally approve the decision to initiate an ABMS and commit the necessary resources?

  1. The internal audit manager acting alone
  2. The most junior compliance analyst available
  3. Top management, consistent with its governance role Correct answer.
  4. An external consultant engaged for the project

Explanation

Top management is responsible for authorizing the ABMS and providing resources, reflecting the standard's emphasis on leadership. Approval by a single manager or an external party does not carry the authority to commit the organization. Consultants can advise but cannot approve on the organization's behalf.

Question 37Initiation of an ABMS implementation

A company wants to define the roles that will govern its ABMS. Which arrangement best reflects good initiation practice?

  1. Establishing a governing body with defined authority and appointing a compliance function Correct answer.
  2. Leaving roles undefined until the first bribery incident occurs
  3. Assigning all ABMS responsibilities to the sales director to ensure commercial alignment
  4. Outsourcing all ABMS decisions to a law firm permanently

Explanation

Good initiation establishes a governing body with clear authority and a compliance function to run the system, with defined responsibilities. Concentrating responsibility in a commercial role creates conflicts of interest, and leaving roles undefined undermines accountability. Permanent outsourcing removes organizational ownership.

Question 38Initiation of an ABMS implementation

During initiation, a project team maps the organization's key stakeholders. Which group is most important to engage early to sustain the ABMS?

  1. Former employees who have already left the organization
  2. Only external journalists who report on corruption
  3. Top management and line leaders who control resources and business decisions Correct answer.
  4. Competitors operating in the same markets

Explanation

Sustaining an ABMS depends on leaders who allocate resources and shape business conduct, so their early engagement is critical. Journalists, competitors, and former employees may be relevant stakeholders in other contexts but cannot authorize or resource the system. Early leadership engagement underpins the whole initiative.

Question 39Initiation of an ABMS implementation

What is the most appropriate way to resource an ABMS at initiation?

  1. Use leftover funds from unrelated projects with no dedicated allocation
  2. Allocate budget, personnel, and time proportionate to the bribery risks identified Correct answer.
  3. Fund it only after the first confirmed bribery case
  4. Rely entirely on unpaid volunteers from unrelated departments

Explanation

Resourcing should be proportionate to the organization's bribery risks, covering people, budget, and time. Relying on volunteers, leftovers, or post-incident funding leaves the system fragile and reactive. Proportionate, planned resourcing signals genuine commitment.

Question 40Initiation of an ABMS implementation

Which statement best describes the relationship between an ABMS and the organization's existing management systems during initiation?

  1. The ABMS must be built as a completely isolated system with no links to other processes
  2. The ABMS can only function if all other systems are abolished
  3. The ABMS should be integrated with existing management systems where practical Correct answer.
  4. The ABMS replaces all other management systems immediately

Explanation

Integration with existing systems such as risk, HR, procurement, and quality processes improves efficiency and adoption. Isolation duplicates effort and weakens embedding, while replacing or abolishing other systems is neither required nor sensible. Initiation should plan for practical integration.

Question 41Initiation of an ABMS implementation

A board asks why an ABMS project should start with a risk assessment before drafting detailed controls. What is the best justification?

  1. It allows the organization to skip leadership involvement
  2. Risk assessment is legally required before any policy can be written
  3. Controls should be proportionate to and targeted at the organization's actual bribery risks Correct answer.
  4. Risk assessment eliminates the need for management review

Explanation

A risk assessment directs effort toward the exposures that matter, so controls are proportionate and targeted. It does not remove the need for management review or leadership involvement, and no general rule requires it before any policy text. Risk-based design is a core principle of the standard.

Question 42Initiation of an ABMS implementation

Which action best demonstrates visible and active top management commitment at the start of an ABMS?

  1. Delegating all communication about the ABMS to a junior clerk
  2. Personally communicating the anti-bribery commitment and modeling expected conduct Correct answer.
  3. Approving the initiative privately without informing staff
  4. Signing a policy but never referring to it again

Explanation

Visible commitment involves leaders communicating the anti-bribery stance and modeling the conduct they expect. Private approval, delegation to junior staff, or a one-off signature without follow-through sends weak signals. Active, ongoing leadership behavior is what embeds the system.

Question 43Initiation of an ABMS implementation

An organization is setting up the project structure to initiate its ABMS. Which combination of elements is most appropriate?

  1. An informal verbal agreement among colleagues with no records
  2. A named project sponsor, a project team, defined milestones, and a communication plan Correct answer.
  3. A single anonymous suggestion box and no assigned owner
  4. A rotating set of volunteers with no documented plan

Explanation

A credible initiation includes a sponsor, a team, milestones, and a communication plan to guide and sustain the effort. Anonymous boxes, unassigned volunteers, or informal verbal agreements lack the structure and accountability needed. Documented planning supports later phases and review.

Question 44Initiation of an ABMS implementation

What is the most appropriate role of a compliance function during the initiation of an ABMS?

  1. To conduct only criminal investigations of employees
  2. To replace top management's decision-making authority
  3. To advise, coordinate, and support the design and implementation of the system Correct answer.
  4. To guarantee that no bribery will ever occur

Explanation

The compliance function advises and coordinates the ABMS and supports its design and operation, while top management retains authority. It cannot guarantee zero bribery and does not replace management decision-making or act solely as an investigator. Its role is enabling and oversight-oriented.

Question 45Initiation of an ABMS implementation

A company has decided to initiate an ABMS but wants to know how much documentation to create up front. What is the best guidance?

  1. Produce every possible procedure in full detail before any risk assessment
  2. Create documentation proportionate to the organization's size, complexity, and risks Correct answer.
  3. Copy another organization's complete document set without adaptation
  4. Avoid all documentation to keep the project flexible

Explanation

Documentation should be proportionate to the organization's size, complexity, and bribery risks so it remains usable and relevant. Producing everything up front, avoiding documentation, or copying another organization's set ignores context. Proportionality is a recurring principle in the standard.

Question 46Initiation of an ABMS implementation

Which circumstance most clearly indicates that an organization should consider initiating or strengthening an ABMS?

  1. It operates only in a low-risk domestic market with no external partners
  2. It is entering new markets through agents and intermediaries with limited oversight Correct answer.
  3. It has fully automated all transactions with no human discretion
  4. It has no commercial activity and no third parties

Explanation

Expansion through agents and intermediaries in new markets typically raises bribery risk, making a stronger ABMS appropriate. Organizations with no activity, no third parties, or no discretion face minimal bribery exposure. Risk indicators should guide the decision to initiate or enhance the system.

Question 47Initiation of an ABMS implementation

During initiation, what is the purpose of establishing a high-level implementation roadmap?

  1. To sequence phases, assign milestones, and guide resource planning Correct answer.
  2. To lock in every detail permanently and prevent any future change
  3. To serve as the final certification evidence for auditors
  4. To replace the need for management review and updates

Explanation

A roadmap sequences the phases, sets milestones, and supports resource planning so the initiative progresses coherently. It is not a rigid, unchangeable plan, nor does it replace management review or constitute certification evidence. Roadmaps guide and can be adjusted as the project evolves.

Question 48Initiation of an ABMS implementation

A company's leadership questions whether to involve employees and worker representatives early in initiating the ABMS. What is the best response?

  1. Exclude employees entirely to speed up the project
  2. Announce the finished system without any prior engagement
  3. Consult only external lawyers and ignore internal staff
  4. Engage employees and their representatives to build understanding and support Correct answer.

Explanation

Early engagement of employees and worker representatives builds understanding, surfaces practical concerns, and supports adoption. Excluding staff, consulting only external parties, or announcing a finished system without input weakens buy-in. Participation improves both design and implementation.

Question 49Initiation of an ABMS implementation

Which statement about the relationship between an ABMS and legal compliance during initiation is most accurate?

  1. An ABMS supports legal compliance but does not replace the need to meet applicable laws Correct answer.
  2. An ABMS is only relevant where bribery is already legal
  3. An ABMS is unnecessary whenever a company has a legal department
  4. An ABMS guarantees full legal compliance in every jurisdiction

Explanation

An ABMS helps organizations manage bribery risk and support compliance, but it does not guarantee compliance with every applicable law. Legal obligations remain regardless of the system, and having a legal department does not remove the need for bribery controls. The system complements, rather than substitutes for, legal compliance.

Question 50Initiation of an ABMS implementation

An organization's initiation plan proposes to define the ABMS scope, secure leadership commitment, and conduct an initial risk assessment. Which element is missing from a sound initiation foundation?

  1. A defined governance structure with assigned responsibilities and resources Correct answer.
  2. A completed external certification audit
  3. A fully operational whistleblowing case management database
  4. A finalized set of disciplinary sanctions for every possible violation

Explanation

A sound initiation foundation includes governance with assigned responsibilities and resources alongside scope, commitment, and risk assessment. Finalized sanctions, certification audits, and operational case databases belong to later design or operation. Governance is the missing enabling element.