5.1.1 - Review of anti-corruption management system

ISO 37001

Organizations need to regularly review the content and operation of their anti-corruption management system to ensure its ongoing effectiveness and alignment with both internal policies and external regulatory requirements. This review process is vital for identifying potential areas for improvement and maintaining compliance with international standards like ISO 37001.

How to Answer This Question

1.   Scheduled Reviews  : Outline how your organization schedules regular reviews of the anti-corruption management system. This should include the frequency of reviews and the specific times or events that trigger a review, such as after major corporate changes or external audits.

2.   Review Mechanisms  : Discuss the methods and tools used during the review process. This might involve internal audits, third-party evaluations, or feedback from compliance software that tracks policy adherence and effectiveness.

3.   Documentation and Reporting  : Highlight how findings from the review are documented and reported. Emphasize the importance of keeping detailed records that demonstrate the review process and its outcomes to satisfy regulatory requirements and support continuous improvement.

Why It’s Important

-   Regulatory Compliance  : Regular reviews help ensure that the management system meets legal and regulatory standards, protecting the organization against legal risks and penalties.

-   Operational Integrity  : By periodically assessing the system, the organization can identify and rectify weaknesses, thereby strengthening its defense against potential bribery and corruption.

-   Stakeholder Confidence  : Demonstrating a commitment to regular reviews can enhance trust among investors, customers, and other stakeholders by showing that the organization is serious about maintaining high ethical standards.

Examples

-   Example A: Large Corporation  

 -   Context  : Operates in multiple countries with high corruption risk.

 -   Action  : Conducts bi-annual reviews of its anti-corruption management system, incorporating feedback from local compliance officers and external legal consultants to ensure local and international standards are met.

-   Example B: Small to Medium Enterprise (SME)  

 -   Context  : Recently expanded operations to include dealings with government contracts.

 -   Action  : Implements annual reviews that focus on the new areas of business, using a combination of internal audits and third-party assessments to ensure compliance with anti-bribery laws.

For more detailed guidance and examples on how to conduct effective reviews of anti-corruption management systems, consider these resources:

-   Agence Française Anticorruption  : [Comprehensive guide on corporate anti-corruption compliance](https://www.agence-francaise-anticorruption.gouv.fr/)

-   Anti-Bribery Guidance | Transparency International  : [Managing an anti-bribery programme](https://www.antibriberyguidance.org/)

These resources provide valuable insights into the best practices for reviewing anti-corruption policies and ensuring they remain effective over time, tailored to both the needs of the organization and the demands of regulatory compliance.