PECB ISO 37001 Foundation study plan
PECB ISO 37001 Foundation · Give each week a clear focus.
8 weeks · About 6 hours per week
Fundamental principles and concepts of an anti-bribery management system – ABMS
Define bribery, bribe, and the distinction between active (offering/giving) and passive (requesting/receiving) bribery in your own words
Explain why an anti-bribery management system (ABMS) is needed by outlining three organizational and three societal harms caused by bribery
Distinguish bribery from related concepts such as facilitation payments, extortion, fraud, and gifts/hospitality
Map the Plan-Do-Check-Act (PDCA) cycle to the high-level structure of an ABMS so you can name what happens in each phase
Your checkpoint
A one-page glossary of 12 core ABMS terms (bribery, active/passive bribery, facilitation payment, extortion, gift, hospitality, due diligence, top management, compliance function, risk, control, interested party) with a one-sentence definition and one real-world example for each
Fundamental principles and concepts of an anti-bribery management system – ABMS
Summarize the scope and purpose of ISO 37001 and identify which organizations it is designed for (all sizes, sectors, public/private/non-profit)
Describe the relationship between ISO 37001 and other frameworks (ISO 37000/37301 family context, national anti-bribery laws) without claiming equivalence
Explain the principle of proportionality and how it shapes the design of controls
Identify the roles of top management, the governing body, the compliance function, and the anti-bribery compliance function within an ABMS
Your checkpoint
A 400-word summary contrasting a proportionate ABMS for a small company versus a large multinational, naming at least five controls that would differ and why
Fundamental principles and concepts of an anti-bribery management system – ABMS
Explain the concept of bribery risk assessment and list the factors that increase bribery risk (country, sector, transaction type, business partners)
Describe the role of due diligence on business associates and the difference between risk-based and blanket due diligence
Outline the purpose of anti-bribery policy, controls, and the reporting/whistleblowing channel
Explain the concept of continual improvement and how nonconformity and corrective action support it
Your checkpoint
A risk register template with 8 sample bribery scenarios scored on likelihood and impact, plus a one-line mitigation for each
Fundamental principles and concepts of an anti-bribery management system – ABMS & ISO 37001 requirements for an ABMS
Read the full text of ISO 37001 clauses 4-10 and annotate each clause with its PDCA phase
Match each requirement clause to the concept you learned in weeks 1-3
Self-test on Domain 1 concepts using 40 practice-style recall questions you write yourself from your glossary
Your checkpoint
A clause map table listing every clause (4 through 10) with its title, PDCA phase, and a one-sentence plain-language paraphrase
ISO 37001 requirements for an ABMS
Explain the requirements of clause 4 (context of the organization, interested parties, scope of the ABMS) and how scope boundaries are determined
Describe clause 5 requirements for leadership, top management commitment, and the anti-bribery policy
Explain clause 6 requirements for actions to address risks and opportunities, bribery risk assessment, and planning of changes
Distinguish mandatory ('shall') from recommended ('should') language and note where ISO 37001 uses each
Your checkpoint
A written sample anti-bribery policy (approximately 500 words) that satisfies clause 5.2 elements, plus a checklist showing which clause 5.2 items it covers
ISO 37001 requirements for an ABMS
Explain clause 7 support requirements including resources, competence, awareness, communication, and documented information
Describe clause 8 operational planning and control requirements, including due diligence, financial controls, non-financial controls, gifts/hospitality, and raising concerns
Explain clause 9 performance evaluation requirements including monitoring, measurement, internal audit, and management review
Explain clause 10 improvement requirements including nonconformity, corrective action, and continual improvement
Your checkpoint
An internal audit checklist with at least 20 questions mapped to specific ISO 37001 clauses 7, 8, 9, and 10
ISO 37001 requirements for an ABMS
Identify the documented information required by ISO 37001 and distinguish records that must be retained from documents that must be maintained
Explain the anti-bribery compliance function's responsibilities and its independence requirements
Describe how the compliance function reports to top management and the governing body
Practice answering scenario-based questions where a requirement is partially met and you must name the gap
Your checkpoint
A documented-information register listing 15 required records/documents with the clause that requires each and a retention note
Fundamental principles and concepts of an anti-bribery management system – ABMS & ISO 37001 requirements for an ABMS
Complete two full timed mock exams (60 questions each) and score at least 80% on the second attempt
Review every missed question and write the correct reasoning in your own words
Re-consolidate the 20 highest-risk concepts using flashcards and a final self-quiz
Confirm exam-day logistics and practice pacing at roughly one minute per question
Your checkpoint
A final revision sheet of 20 concepts you found hardest, each with a one-paragraph explanation and the clause or concept it links to
Milestones
Week 2: Can explain the difference between active and passive bribery, facilitation payments, and gifts/hospitality without notes, and score at least 70% on a self-made 20-question Domain 1 quiz
Week 4: Clause map table is complete for clauses 4-10 and you can state the PDCA phase for each clause from memory
Week 6: Can describe the requirements of clauses 7, 8, 9, and 10 in plain language and have a 20-question audit checklist mapped to clause numbers
Week 8: Score at least 80% on a full timed mock exam and can explain every missed item's correct reasoning