ISO 37001 LI study plan
ISO 37001 LI · Give each week a clear focus.
8 weeks · About 6 hours per week
Fundamental concepts and principles of anti-bribery management
Explain in your own words the difference between bribery, facilitation payments, and extortion, and map each to the ISO 37001 definitions
Distinguish the roles of governing body, top management, compliance function, and anti-bribery compliance function (ABCF) in an ABMS
Describe the Plan-Do-Check-Act logic that structures ISO 37001 clauses 4 through 10
Identify the types of bribery risk an organization faces (direct, indirect, third-party, passive, active) and give one realistic example of each
Your checkpoint
A one-page glossary plus a 300-word written summary of the standard's architecture, self-scored against a 10-question practice set with at least 8 correct
Fundamental concepts and principles of anti-bribery management & Initiation of an ABMS implementation
Interpret the intent of clauses 4.1 and 4.2 (understanding the organization and its context, interested parties) and list the inputs each requires
Determine the scope of an ABMS for a fictional organization and justify exclusions in writing
Draft an anti-bribery policy outline that satisfies clause 5.2 requirements, including the prohibition of bribery and the commitment to comply
Distinguish leadership commitment obligations from merely documented responsibilities
Your checkpoint
A scoping statement and draft anti-bribery policy for a fictional mid-sized company, with a reviewer checklist showing which clause 5.2 requirements each paragraph meets
Initiation of an ABMS implementation & Planning of an ABMS implementation based on ISO 37001
Perform a bribery risk assessment using likelihood and impact criteria, and record the methodology used
Rank at least eight identified bribery risks and assign treatment options (avoid, mitigate, transfer, accept)
Explain how risk assessment outputs feed the due diligence, controls, and monitoring clauses
Identify the documented information required at the planning stage and how it is retained
Your checkpoint
A completed risk register with at least eight bribery scenarios, scoring rationale, and treatment decisions, plus a one-page note on how it links to clauses 6 and 8
Planning of an ABMS implementation based on ISO 37001 & Implementation of an ABMS based on ISO 37001
Translate risk assessment outputs into specific anti-bribery controls and assign owners
Design due diligence procedures for third parties, including risk-based tiers and review triggers
Define the elements of a gifts, hospitality, and donations process that meets clause 8.7
Outline the reporting channels and whistleblower protection required by clause 8.9
Your checkpoint
A controls matrix mapping each identified risk to a control, an owner, a frequency, and the evidence produced; plus a short procedure for third-party due diligence
Implementation of an ABMS based on ISO 37001
Describe the training and communication requirements of clause 7.3 and how to tailor them by role and risk
Explain the financial and non-financial controls expected under clause 8.6, including segregation of duties
Design the investigation process for suspected bribery, including confidentiality and reporting lines
Distinguish the compliance function's monitoring duties from the ABCF's assurance duties
Your checkpoint
A one-page anti-bribery communication and training plan for three role groups plus a written investigation procedure covering intake, triage, and outcome reporting
Evaluation of the performance of an ABMS based on ISO 37001
Define performance indicators and monitoring methods that satisfy clause 9.1
Plan an internal audit programme, including scope, criteria, frequency, and auditor independence
Prepare for a management review by assembling the required inputs and drafting an agenda
Distinguish nonconformity from observation and draft a corrective action record for one scenario
Your checkpoint
An internal audit plan with a sample audit checklist of at least 15 clause-based questions, plus a management review agenda and a completed corrective action form for a fictional nonconformity
Continual improvement of an ABMS based on ISO 37001 & Preparation for an ABMS certification audit
Describe how nonconformities and corrective actions drive continual improvement under clauses 10.1 and 10.2
Assess the adequacy of an ABMS by reviewing a set of fictional records against clause 9.2 audit criteria
Explain the certification process stages: application, stage 1, stage 2, surveillance, and recertification
Identify common reasons organizations fail a stage 1 audit and how to pre-empt them
Your checkpoint
A gap analysis report of a fictional ABMS against clauses 4 to 10, with a prioritized improvement plan and a one-page certification readiness brief
Preparation for an ABMS certification audit
Conduct a full mock certification audit under timed conditions and score your responses
Explain how certification bodies assess conformity and what evidence auditors expect for each clause
Review and strengthen weak domains identified by the mock audit
Summarize the key clause requirements in a personal reference sheet for final review
Your checkpoint
A completed 60-question timed mock exam with a written review of every incorrect answer and a one-page clause reference sheet
Milestones
Week 2: Can explain the standard's clause structure and the roles of governing body, top management, compliance function, and ABCF without notes
Week 4: Risk register and controls matrix are complete and traceable from risk to control to evidence
Week 6: Can describe monitoring, internal audit, and management review requirements and draft a corrective action record
Week 8: Scored at least 80 percent on the full mock exam and can explain every missed question in clause terms