Prevent bribery. Prove due diligence. Win with compliant growth.
Evidence pack, third-party due diligence trail, and KPI dashboard prepared for Stage 1 and Stage 2 audits.
Designed for organizations facing enforcement exposure, tender eligibility demands, and third-party risk at scale.
General Counsel, CCO, Ethics & Compliance leads owning policy, investigations, and assurance.
Heads of Procurement overseeing third-party onboarding, risk tiers, and ongoing monitoring.
Operational leaders with distributor and government touchpoints who must evidence control.
Market entry, distributor model launch, public tenders, PE exit readiness, or recent investigation.
Entity, region, or process scope with clear boundaries and interfaces to adjacent functions.
Risk-rated third parties, completed EDD files pre-onboarding, policy attestations, training, hotline, and CAPA.
Executive explainer. Focused anti-bribery controls with clear interfaces to broader integrity risks.
Anti-bribery policy, risk assessment, third-party due diligence, gifts & hospitality, charitable contributions, facilitation payments, conflicts of interest, financial and non-financial controls, training, investigations, speak-up, monitoring, and continual improvement.
Bribery vs wider integrity risks; interfaces with fraud and competition law; and extraterritorial exposure across your third-party network.
Lower penalties and investigation disruption through documented adequate procedures.
Meet eligibility and customer due-diligence with a certifiable ABMS.
Risk-based onboarding and monitoring reduce exposure from agents, distributors, and brokers.
% third parties risk-rated; % high-risk EDD pre-onboarding; policy completion rate; training pass rate; hotline usage trend; investigation cycle time; CAPA closure time.
Non-advisory mapping. ISO 37001 is not legal compliance by itself. It evidences adequate procedures.
FCPA (US), UK Bribery Act, Sapin II (FR), Brazilian Clean Company Act, Italian Legislative Decree 231.
ISO 37301 (Compliance MS), ISO 37002 (Whistleblowing). Interfaces to ISO 27001, 9001, 22301.
Certification supports defense arguments but does not grant immunity under any law.
Policy set inventory; clause-by-clause gap; data-flow mapping; high-risk third-party landscape.
Risk model; due-diligence tiers; controls library; RACI; KPIs; training plan.
Policies/SOPs; registers; 3P workflows; hotline & investigations; internal audit set-up.
Evidence pack; management review; corrective actions; CB coordination.
10–18 weeks SME; 16–24 weeks multi-country. Certification cycle: 3-year certificate with annual surveillance.
Approved policy and aligned Code of Conduct with bribery prohibitions.
Bribery risk report, heatmap, refresh cadence.
Tiers, triggers, red flags, and screening sources.
Questionnaires, OSINT checks, escalations, approvals.
Gifts, hospitality, donations, sponsorships with thresholds.
Prohibition and exception handling with approvals and logs.
COI declarations, recusals, periodic refresh.
Segregation, approvals, cash-equivalents, sponsorships.
Hotline, anti-retaliation, triage, metrics.
Chain of custody, logs, sanctions matrix, closure criteria.
Role-based content, completions, competency verification.
Trend analysis and management inputs.
Minutes and decisions, actions tracked.
Scope, sites, headcount, processes, risk overview.
Choose ISO 37001.
Choose ISO 37301. Integrates with 37001.
Use ISO 37002 guidance. Often combined with 37001/37301.
| Topic | ISO 37001 | ISO 37301 | ISO 37002 |
|---|---|---|---|
| Purpose | Anti-bribery MS | Compliance MS | Whistleblowing guidance |
| Certifiable | Yes | Yes | No |
| Primary users | CCO/GC | CCO/ERM | HR/Legal/Audit |
| Key artifacts | ABMS policy, 3P DD, gifts, COI, investigations | Compliance risk, obligations mgmt | Speak-up process, protection |
| Works with | 9001/27001/22301 | 37001/27001 | 37001/37301 |
Top risks: procurement integrity, grants. Controls: segregation, tender governance. KPIs: % competitive tenders, exception approvals.
Top risks: agents, JVs, customs. Controls: 3P EDD, agent monitoring. KPIs: % high-risk EDD, payment exception rate.
Top risks: permits, inspections. Controls: COI, gifts registers. KPIs: COI completion rate, gift threshold breaches.
Top risks: HCP interactions, sponsorships. Controls: approvals, transparency. KPIs: HCP payment variance, disclosure timeliness.
Top risks: licensing, ROW, distributors. Controls: distributor DD, rebate controls. KPIs: distributor EDD timeliness.
Top risks: customs brokers, security fees. Controls: receipts, incident logs. KPIs: incident closure time.
Design to certification with change and evidence management.
DD platform selection and onboarding workflows.
Registers automation and policy attestation.
Role-based, high-risk roles, country packs.
Mock certification and CAPA acceleration.
Case handling training and documentation.
Due-diligence tools, case management, gifts registers, policy attestation, LMS, data connectors.
We integrate with your stack and data sources.
KPI and risk dashboards for management review.
Accredited certification body coordination. Stage 1 readiness then Stage 2 certification.
Annual surveillance audits over a three-year cycle.
Incomplete 3P DD trail, weak COI controls, unmanaged gifts registers, missing CAPA evidence. We fix these early.
Objective: Prevent improper payments. Control: approval workflow, logs, receipts. Owner: Country Manager. Evidence: registers, approvals.
Objective: Vet and monitor. Control: EDD, contracts, KPI monitoring. Owner: Procurement. Evidence: EDD files, reviews.
Objective: Fair process. Control: conflict checks, thresholds, transparency. Owner: Legal/Compliance.
Board, C-suite, CCO, Legal, IA, Procurement, HR, Country Managers with independent oversight line.
Quarterly management review with KPI thresholds and decision log.
Internal audit cadence aligned to risk. Evidence repository under change control.
Training pass rate, policy attestations, EDD completion, hotline volume and closure time, CAPA timeliness.
HRIS, procurement, case management, learning, finance, vendor tools.
Inputs: KPIs, risks, incidents, audit results. Outputs: actions, resources, improvements.
98% high-risk EDD pre-contract within 90 days; tender wins increased by 12%.
<30-day CAPA closure and 100% policy attestations inside 60 days.
Investigation cycle time cut by 35%; audit NCs closed at first follow-up.
Policy outline, risk model, 3P DD checklist, gifts/hospitality CSV, investigation form.
Get KitNo government or ISO logos. Informational only, not legal advice.