Gap assessment
Current anti-bribery controls against the standard.
ISO 37001 Implementation for G7 Contractors
ISO 37001 implementation is building an anti-bribery management system from scratch and preparing it for first-time certification, here tailored to construction contractors. CIDB has made MS ISO 37001 anti-bribery certification mandatory for G7 contractors. We build the management system from the ground up for construction businesses and prepare you for the certification audit.
ISO 37001 Implementation for G7 Contractors
What it is
An implementation engagement for contractors seeking first-time anti-bribery management system certification: risk assessment, policy, controls, documentation, training, internal audit and certification readiness.
Why organisations need it
CIDB Pekeliling Bil. 1/2026 makes MS ISO 37001 certification mandatory for G7 contractors. Accreditation rules also moved initial certifications to the 2025 edition of the standard from 31 August 2026, and how CIDB treats the editions should be confirmed with CIDB directly. Either way, the work is the same: a functioning system that addresses construction bribery risks and supports the Section 17A adequate procedures defence.
What the engagement covers
Bribery risk assessment
Tenders, approvals, variations, payments and subcontractors.
Policy and function
Anti-bribery policy and function with authority.
Controls
Due diligence, gifts, hospitality, financial and tender controls.
Training and communication
Role-based training for site and office.
Internal audit and readiness
Internal audit, management review and certification readiness.
What the business gets out of it
Tender eligibility protected
Certification ahead of CIDB deadlines.
Construction-specific
Risks your business actually faces.
Section 17A evidence
One system for certification and defence.
Audit ready
Mock audit before certification.
Built to last
A system you can run after we leave.
How it works
How the engagement runs
01
Gap assessment
Where you stand.
02
Design
Risk assessment and policy.
03
Implementation
Controls, documents and training.
04
Internal audit
Testing the system.
05
Certification readiness
Mock audit and support.
Deliverables
What you receive
Gap assessment report
Against the standard.
Bribery risk register
Construction-specific.
Management system documents
Policy, procedures and records.
Training materials
Role-based.
Internal audit report
Before certification.
Who it is for
Who this is built for
Industries
Company sizes
Departments
FAQ
FAQ
No. This service is for contractors seeking certification for the first time. If you already hold an ISO 37001:2016 certificate, you need our ISO 37001:2025 Transition service instead, because accredited 2016 certificates stop being valid after 28 February 2027.
New certifications are now to the 2025 edition of the standard under accreditation rules, which moved initial certification to 2025 from 31 August 2026. CIDB Pekeliling Bil. 1/2026 names MS ISO 37001, so confirm with CIDB how it treats the editions for your application.
Typically four to six months before a certification audit, depending on the size of the business: bribery risk assessment, policy, controls over tenders, variation orders and subcontractors, documentation, training, and an internal audit and management review before the certification body arrives.
No. Certification must come from an accredited certification body that is independent of whoever helped build the system. We implement the system with you and prepare you for the audit; the certificate comes from them.
Yes. Under Section 17A of the MACC Act, the only defence for a company is proving adequate procedures were in place. A functioning, certified anti-bribery management system and its records are strong evidence of those procedures.