7.5.3 - Documented information : Control of externally originated information

The ISO 37001 Anti-Bribery Management Systems standard, instituted by the International Organization for Standardization in 2016, directs organizations globally in fortifying their anti-corruption frameworks. This standard is pivotal for both private and public entities of any size, focusing on active prevention, detection, and management of bribery risks.

How to Answer the Question

When addressing how an organization controls information of external origin for the anti-corruption management system, consider the following aspects:

1.   Identification and Assessment  :

  - Describe how the organization identifies external information that is relevant and critical to the anti-corruption management system.

  - Discuss the process of assessing the reliability and credibility of external information sources.

2.   Control Measures  :

  - Explain the controls put in place to manage access, distribution, and use of externally sourced information.

  - Include how the organization ensures that such information is integrated into the system without compromising integrity or security.

3.   Monitoring and Review  :

  - Highlight the procedures for regularly reviewing and updating external information to maintain its relevance and accuracy in the context of evolving anti-corruption standards and practices.

For detailed guidance on implementing these controls, resources like the [ISO 37001 standards on anti-bribery management systems](https://www.iso.org/standard/65034.html) can be invaluable.

Why It's Important

Controlling externally originated information is crucial for several reasons:

-   Ensuring Reliability  : Proper control mechanisms ensure that only reliable and accurate information influences the anti-corruption management system.

-   Maintaining Compliance  : It helps the organization stay compliant with legal and regulatory standards by using verified and pertinent information.

-   Enhancing Decision Making  : Accurate and well-controlled external information supports better decision-making processes related to anti-corruption strategies and actions.

Examples

-   Example A  :

 -   Context  : A corporation integrates market intelligence reports from verified external providers into its anti-corruption system.

 -   Action  : It establishes a protocol for assessing the credibility of information sources and a system for regular updates and reviews.

 -   Outcome  : The organization is able to make informed decisions about entering new markets and partnerships, thus mitigating corruption risks.

-   Example B  :

 -   Context  : An NGO works in multiple countries and regularly receives compliance updates from international regulatory bodies.

 -   Action  : They set up a dedicated team to review and integrate these updates into their operational policies and training modules.

 -   Outcome  : The NGO maintains high compliance standards and adapts swiftly to new anti-corruption requirements.

These steps are fundamental in creating a robust anti-corruption framework supported by credible external information. For further insights on managing external information within an anti-corruption context, consider visiting the [Agence Française Anticorruption](https://www.agence-francaise-anticorruption.gouv.fr) for additional resources and guidelines.