5.1.2 - Establishment and maintenance of the system
ISO 37001
Organizations must ensure their anti-corruption management system is not only established but also effectively implemented, maintained, and reviewed to adapt to changing risks and compliance requirements. Top management plays a crucial role in overseeing these processes.
How to Answer This Question
1. Establishing the System : Detail how your organization’s top management is involved in the initial setup of the anti-corruption management system. This includes defining the system's scope, objectives, and ensuring it aligns with the organization's overall strategy.
2. Implementing the System : Explain the steps taken by top management to integrate the anti-corruption policies across all departments and operations. This might involve training programs, clear communication of policies, and the establishment of compliance protocols.
3. Maintaining the System : Discuss how top management ensures the system remains effective. This could include regular audits, updates to policies based on new risks or regulatory changes, and ongoing training and support for employees.
4. Reviewing the System : Describe the mechanisms in place for periodic reviews of the anti-corruption management system by top management. Mention how feedback is gathered, the frequency of reviews, and how the findings from these reviews are used to enhance the system.
Why It’s Important
- Compliance with Standards : Regular establishment, maintenance, and review of the anti-corruption system ensure compliance with international standards such as ISO 37001, which can protect against legal risks and enhance the organization's reputation.
- Operational Integrity : An effectively managed anti-corruption system helps maintain operational integrity, fosters a culture of ethics and transparency, and mitigates bribery risks which are crucial for sustainable business operations.
- Stakeholder Confidence : Demonstrating active involvement and commitment by top management in these processes reassures stakeholders — including investors, customers, and regulatory bodies — of the organization’s dedication to combating corruption.
Examples
- Example A: Multinational Corporation
- Context : Operates in multiple countries with varying levels of corruption risk.
- Action : Established a centralized compliance office to ensure uniformity in the anti-corruption policies across all regions. Regularly conducts risk assessments and adjusts policies as needed.
- Example B: Small Enterprise
- Context : Limited resources and operates primarily in low-risk environments.
- Action : Top management directly oversees the implementation of a straightforward anti-corruption policy, conducts annual reviews, and uses third-party audits to ensure compliance.
For further insights and guidelines on how to establish and maintain an anti-corruption management system, you can visit:
- Agence Française Anticorruption : [Guidelines on Corporate Anti-Corruption Compliance](https://www.agence-francaise-anticorruption.gouv.fr/)
- Transparency International : [Anti-Bribery Guidance](https://www.antibriberyguidance.org/)
These resources provide comprehensive guidelines and best practices that can help your organization develop, implement, and review an effective anti-corruption management system.