Fundamental concepts and principles of anti-bribery management
What this domain tests
The exam checks that you can define bribery precisely, separate it from neighbouring concepts, state what ISO 37001 does and does not cover, and apply the standard's principles to short factual scenarios.
Definitions that carry marks
ISO 37001 treats bribery as offering, promising, giving, accepting or soliciting an advantage - financial or non-financial - as an inducement for an action that is illegal, unethical or a breach of trust. Two consequences follow. The advantage need not be cash: a job for a relative, a visa, a scholarship or a scholarship promise all count. And the trigger is the inducement, not the label the parties attach to the payment.
Bribery can be active (offering) or passive (receiving), direct (your own employee) or indirect (an agent, distributor, consultant or joint-venture partner acting for you). Corruption is broader: it covers bribery plus embezzlement, trading in influence and other abuses of entrusted power. Fraud, cartels and money laundering are outside ISO 37001 except where they intersect bribery.
Principles the standard applies
- Top-level commitment. The governing body and top management set the tone and are accountable for the ABMS.
- Proportionality. Controls must be reasonable relative to the bribery risk; the same procedures need not apply identically in every subsidiary.
- Risk-based design. The bribery risk assessment drives which controls are built and how strict they are.
- Due diligence on business associates and transactions before commitment, not after.
- Documented information so that decisions and controls are traceable.
Worked example
A sales manager pays a customs clerk USD 300 to release a delayed shipment, calling it an "express fee". This is bribery: an advantage given to a public official to induce an action that is illegal or a breach of trust. The small amount and local custom are not defences. Because the payment is made to speed up a routine entitlement, it is also a facilitation payment, which the standard expects to be prohibited. Correct handling: record it, treat it as an incident under Clause 8.9, and address the root cause.
Traps
Assuming certification means no bribery will ever occur; treating gifts as automatically prohibited rather than judged on intent and perception; confusing bribery with the wider term corruption; ignoring indirect bribery through intermediaries.