8.5.1 - Controls and due diligence for controlled organizations and business associates : Enforcement of anti-corruption system for associates

The ISO 37001 Anti-Bribery Management Systems standard, instituted by the International Organization for Standardization in 2016, directs organizations globally in fortifying their anti-corruption frameworks. This standard is pivotal for both private and public entities of any size, focusing on active prevention, detection, and management of bribery risks.

How to Answer the Question

To effectively outline the procedures for enforcing an anti-corruption management system among controlled organizations and business associates, consider the following steps:

1.   Policy Implementation  :

  - Define clear anti-corruption policies and communicate them to all controlled entities and business associates.

  - Ensure these policies are incorporated into the contractual agreements with associates.

2.   Due Diligence and Risk Assessment  :

  - Conduct thorough due diligence on all associates to identify potential corruption risks.

  - Continuously assess and update the risk profiles of associates to reflect changes in their operations or the regulatory environment.

3.   Control Measures  :

  - Implement specific control measures such as regular audits, compliance checks, and training sessions to ensure adherence to anti-corruption standards.

  - Establish mechanisms for monitoring and reporting any suspicious activities.

For comprehensive guidance on implementing these procedures, refer to the [ISO 37001 Anti-Bribery Management Systems](https://www.iso.org/standard/65034.html), which provides a detailed framework for managing bribery risks.

Why It's Important

Enforcing an anti-corruption management system for associates is crucial for:

-   Maintaining Legal Compliance  : Ensures that the organization and its associates adhere to relevant anti-corruption laws and regulations.

-   Protecting Reputation  : Helps safeguard the organization's reputation by associating with entities that uphold similar ethical standards.

-   Minimizing Risk  : Reduces the risk of corruption and its potential financial and legal repercussions.

Additional insights can be found at the [Agence Française Anticorruption](https://www.agence-francaise-anticorruption.gouv.fr), which offers resources on enhancing compliance measures.

Examples

-   Example A  :

 -   Context  : A multinational company requires all its suppliers to comply with its anti-corruption policy.

 -   Action  : Implemented a certification process for suppliers, requiring them to undergo anti-corruption training and sign a compliance agreement annually.

 -   Outcome  : This process has led to a significant decrease in compliance violations and has been instrumental in maintaining ethical supply chain practices.

-   Example B  :

 -   Context  : A corporation identified high corruption risks with its overseas partners.

 -   Action  : Established a rigorous monitoring system that includes regular reviews and audits of the partners' transactions and business practices.

 -   Outcome  : Enhanced control over the operations of business partners, leading to better compliance with the corporation's anti-corruption standards.

For more detailed procedures on managing business associates' risks, visit the guidelines provided by [OECD](https://www.oecd.org) on corporate governance and anti-corruption.