ISO 37001 Lead Implementer and Auditor
ISO 37001 awareness explains what an anti-bribery management system is supposed to contain. This two-day programme is the practitioner follow-on: building one from a standing start, and separately, auditing one against the standard once it exists. It assumes the awareness-level grounding covered in Anti-Bribery Management (ISO 37001) Fundamentals and does not repeat it.
The two days are built around the two roles the title names. The implementer side works through gap analysis against the ISO 37001:2025 clause structure, bribery risk assessment, due diligence on business associates, and the compliance function's reporting line and independence. The auditor side works through planning an internal audit programme, evidence sampling, classifying nonconformities, and reporting findings that management review can actually act on. Participants finish with both a gap analysis and a short internal audit plan for their own organisation.
HRD Corp SBL-Khas Claimable
Programme Agenda
Day 1, 9:00 AM - 9:15 AM
Welcome and Programme Overview
Introduction to the session, objectives, and housekeeping.
Day 1, 9:15 AM - 10:15 AM
The ISO 37001:2025 Clause Structure and Where Organisations Actually Start
A working read of the standard's clause structure at implementation depth rather than awareness depth, and the gap analysis method for establishing, against each clause, what already exists, what exists but is undocumented, and what does not exist at all.
Day 1, 10:15 AM - 10:30 AM
Break
Day 1, 10:30 AM - 12:30 PM
Bribery Risk Assessment
A structured method for assessing bribery risk across business units, markets, counterparties and transaction types, scoring and prioritising the results, and feeding the output into where the management system needs to apply controls first.
Day 1, 12:30 PM - 1:30 PM
Lunch
Day 1, 1:30 PM - 3:15 PM
Due Diligence on Business Associates
Designing a due diligence process proportionate to risk for agents, intermediaries, joint venture partners and other business associates, the red flags a due diligence check should surface, and documenting the decision to proceed, decline or apply enhanced conditions.
Day 1, 3:15 PM - 3:30 PM
Break
Day 1, 3:30 PM - 4:45 PM
Building the Compliance Function and Implementation Plan
The anti-bribery compliance function's reporting line and independence requirements under the standard, converting a gap analysis into a phased implementation plan with named owners, and the documentation an ABMS needs to produce as a matter of course rather than only for an audit.
Day 1, 4:45 PM - 5:00 PM
Day 1 Close
Recap and what to review before day two.
Day 2, 9:00 AM - 9:15 AM
Day 1 Review
Recap of day one and the questions it left open.
Day 2, 9:15 AM - 10:15 AM
Internal Audit Planning for an ABMS
Building a risk-based internal audit programme for an anti-bribery management system, writing an audit plan and checklist against specific clauses, and scoping an individual audit so it tests whether controls work rather than only whether documents exist.
Day 2, 10:15 AM - 10:30 AM
Break
Day 2, 10:30 AM - 12:30 PM
Conducting the Audit: Evidence, Sampling and Nonconformities
Evidence-gathering techniques and sampling methods appropriate to an ABMS audit, classifying findings as major nonconformity, minor nonconformity or observation, and writing a finding that a process owner can actually act on.
Day 2, 12:30 PM - 1:30 PM
Lunch
Day 2, 1:30 PM - 3:15 PM
Reporting and Management Review
Structuring an audit report for management review, feeding audit findings and other inputs into the management review cycle the standard requires, and closing the loop from finding to corrective action to verification.
Day 2, 3:15 PM - 3:30 PM
Break
Day 2, 3:30 PM - 4:45 PM
Workshop: Gap Analysis and Audit Plan for Your Own Organisation
Participants complete a condensed gap analysis against the ISO 37001:2025 clause structure for their own organisation, then draft a short internal audit plan for one process area, applying both the implementer and auditor perspectives covered across the two days.
Day 2, 4:45 PM - 5:00 PM
Wrap-Up and Q&A
Key takeaways, next steps, and close.
Key Outcomes
- Run a gap analysis against the ISO 37001:2025 clause structure and convert it into a phased implementation plan
- Design and apply a bribery risk assessment across business units, markets and counterparties
- Build a due diligence process for business associates proportionate to risk
- Establish the anti-bribery compliance function's reporting line and independence requirements
- Plan and conduct an internal audit of an anti-bribery management system
- Classify nonconformities and write findings that drive corrective action
- Produce a gap analysis and an internal audit plan for their own organisation
Training Mode Physical / Online / Hybrid / e-learning
HRD Corp SBL-Khas Claimable
Level Advanced. For compliance officers, internal auditors and anti-bribery programme owners who already have ISO 37001 awareness, whether from Anti-Bribery Management (ISO 37001) Fundamentals or equivalent prior exposure.
Duration 2 Days (16 Hours) | 9:00 AM to 5:00 PM daily
Venue In-house at the client's premises, or delivered via the client's preferred platform (Microsoft Teams, Zoom, or equivalent)
Assessment A gap analysis and internal audit plan for the participant's own organisation, completed as a written submission, plus a knowledge check
Certificate Certificate of Completion issued to all participants upon full attendance