Fundamental principles and concepts of an anti-bribery management system (ABMS)
This domain tests the concepts and vocabulary behind ISO 37001:2016: what an ABMS is, what it governs, and the principles that shape every requirement. Clause details belong to the second domain.
What an ABMS is
An ABMS is the set of interrelated policies, procedures, controls, responsibilities and behaviours through which an organization manages bribery risk. ISO 37001 is a certifiable requirements standard: it uses the verb “shall”, can be audited by a third party, and applies to any organization in any jurisdiction. Its controls must be reasonable and proportionate to the bribery risk actually faced.
Core concepts
- Bribery: offering, promising, giving, accepting or soliciting an advantage, directly or indirectly, as an inducement for an action that is illegal, unethical or a breach of trust. Advantages include gifts, hospitality, donations, jobs and favours, not only cash.
- Business associate: an external party with which the organization has or plans a business relationship - agent, consultant, contractor, supplier, joint-venture partner. These relationships are the most common bribery channel.
- Public official: broadly defined, from a customs officer to staff of a state-owned enterprise.
- Facilitation payment: a small payment to speed up a routine action; ISO 37001 expects these to be prohibited.
- Risk-based approach: control depth follows assessed risk - country, sector, transaction, relationship.
Worked example
A distributor proposes giving branded watches to 40 procurement officers of a state-owned utility. The risk assessment flags public officials and a high-risk sector, so the gift is tested against the gift procedure: is it bona fide, modest and free of any intent to obtain an improper advantage? It is not, so the gift is refused, the refusal recorded and the distributor’s due diligence file updated. The standard does not ban gifts; it demands proportionate controls and a documented judgement.
Traps that cost marks
- Treating certification as proof that no bribery occurs - it certifies the system, not behaviour.
- Believing gifts and hospitality are banned outright.
- Treating facilitation payments as an accepted exception.
- Assuming ISO 37001 covers fraud, cartels or money laundering; its scope is bribery.