5.3.2 - Anti-bribery compliance function : Resource allocation

ISO 37001

How to Answer the Question

When addressing the adequacy of resources for the compliance function, consider the following aspects:

-   Human Resources:   Detail the qualifications, experience, and number of personnel dedicated to the compliance function. Discuss whether these resources meet the demands of the organization’s compliance needs.

-   Material Resources:   Describe the tools, systems, and facilities available to the compliance function that support its operations.

-   Financial Resources:   Reflect on the budget allocated to the compliance function, including expenditures for training, auditing, and other compliance activities.

For guidance on setting up an effective compliance function, reference materials from the [Agence Française Anticorruption](https://www.agence-francaise-anticorruption.gouv.fr).

Why It's Important

Understanding and ensuring adequate resource allocation for the compliance function is crucial because:

-   Supports Effective Compliance:   Adequate resources enable the function to perform its duties effectively, preventing bribery and ensuring regulatory compliance.

-   Enhances Risk Management:   Sufficient resources allow for better risk identification, assessment, and mitigation strategies.

-   Promotes Organizational Integrity:   Well-resourced compliance functions strengthen organizational ethics and integrity, enhancing corporate reputation.

For further insights, consult the [European Securities and Markets Authority guidelines](https://www.esma.europa.eu).

Examples

-   Example A:  

 -   Context:   A large pharmaceutical company allocates a significant budget to its compliance department to conduct regular training sessions and update compliance software.

 -   Action:   Investments are made in advanced compliance training for staff and in state-of-the-art software for monitoring compliance.

 -   Outcome:   The robust resources lead to a highly effective compliance program that successfully identifies and mitigates risks.

 Explore more about resource allocation strategies from [KPMG’s insights](https://assets.kpmg.com).

-   Example B:  

 -   Context:   A small fintech startup with limited resources appoints a part-time compliance officer and utilizes third-party services.

 -   Action:   The compliance officer effectively coordinates with external experts to oversee and manage compliance requirements.

 -   Outcome:   The startup maintains compliance with regulatory standards without the overhead of a full-time staff, demonstrating efficient resource use.

 Additional case studies can be found on the [OECD’s platform for corporate anti-corruption measures](https://www.oecd.org).