Every organisation faces bribery risk. ISO 37001 is the answer.

Start by understanding your organisation’s exposure to bribery risks and how your existing anti-bribery controls compare with ISO 37001 requirements. Your team typically carries out an internal review to identify weaknesses in governance, risk assessment, due diligence, controls and monitoring before certification.

Most organisations benefit from training to understand how anti-bribery management systems operate in practice. Training helps compliance, legal, procurement and commercial teams identify bribery risks, apply due diligence, manage third-party relationships and implement proportionate anti-bribery controls.

ISO 37001 requires organisations to manage bribery risks proportionately. Higher-risk activities such as third-party relationships, government interactions or operations in higher-risk jurisdictions require stronger controls, monitoring and training, while lower-risk areas can be managed through simpler arrangements.

Your team usually reviews the system against the standard, then carries out an internal audit and a management review before the formal assessment. This helps identify missing anti-bribery procedures, clarify responsibilities, strengthen due diligence processes and confirm that controls operate effectively across the organisation.

ISO 37001 certification follows a two-stage audit. Stage 1 reviews anti-bribery management system documentation and system design. Stage 2 assesses how anti-bribery controls operate in practice through interviews, document reviews and testing of procedures such as due diligence, reporting and investigations.

Most organisations achieve certification within six to twelve months, depending on size, geographic footprint and the maturity of existing anti-bribery and compliance controls.

As an accredited certification body, Speeki does not provide ISO 37001 implementation services. Alongside certification, Speeki offers training and technology: ISO 37001 training helps teams understand how an anti-bribery management system operates, and the Speeki Engage® platform keeps policies, due diligence records, training, incidents and audit evidence in one place.

Certification costs depend on organisational size, operational complexity and the duration of the certification audit. In addition to certification fees, organisations should plan for the training and technology needed to manage anti-bribery controls and evidence effectively.