Corruption Risk Management Standard (MS 2764)
MS 2764 is a Malaysian national standard addressing corruption risk management, distinct from, and intended to work alongside, the internationally recognised ISO 37001 anti-bribery management system standard. This one-day programme covers what the standard asks an organisation to do: assess corruption risk at an organisational level, design controls proportionate to that risk, and keep the work connected to the organisation's existing risk framework rather than running it as a separate exercise.
The day stays at the level of purpose, scope and practical method rather than a clause-by-clause legal reading, since the standard's exact structure is a matter for the issuing body's own published text. It covers corruption risk assessment at an organisational level, where MS 2764 sits alongside ISO 37001 rather than duplicating it, integrating corruption risk into the enterprise risk management framework already in use (see Enterprise Risk Management for the underlying framework this course assumes), and designing controls for the processes that carry the most corruption exposure.
HRD Corp SBL-Khas Claimable
Programme Agenda
9:00 AM - 9:15 AM
Welcome and Programme Overview
Introduction to the session, objectives, and housekeeping.
9:15 AM - 10:15 AM
What MS 2764 Addresses and How It Relates to ISO 37001
The purpose and scope of MS 2764 as a Malaysian standard on corruption risk management, and a practical comparison with ISO 37001: where the two overlap, where MS 2764's national context adds something ISO 37001 does not specify, and why an organisation might use both rather than choosing one.
10:15 AM - 10:30 AM
Break
10:30 AM - 11:30 AM
Corruption Risk Assessment at an Organisational Level
A structured method for identifying and assessing corruption risk across business units, functions and processes, scoring likelihood and impact, and producing a risk register that a board or audit committee can actually use.
11:30 AM - 12:30 PM
Integrating Corruption Risk Into the Enterprise Risk Framework
Why corruption risk run as a standalone exercise tends to drift out of date, and how to fold it into an existing enterprise risk management cycle so it gets reviewed, challenged and updated on the same schedule as every other risk the organisation tracks.
12:30 PM - 1:30 PM
Lunch
1:30 PM - 2:20 PM
Control Design for High-Corruption-Risk Processes
Designing controls proportionate to assessed risk for the processes that generate the most corruption exposure in practice: procurement, licensing and approvals, and cash handling, and the difference between a control that looks good on paper and one that actually changes behaviour.
2:20 PM - 3:15 PM
Monitoring, Reporting and Continual Improvement
What ongoing monitoring of a corruption risk management programme should produce, reporting lines into senior management and the board, and using monitoring data to update the risk assessment rather than treating it as a one-time exercise.
3:15 PM - 3:30 PM
Break
3:30 PM - 4:45 PM
Workshop: Building a Corruption Risk Register
Participants build a corruption risk register for a set of high-exposure processes from a supplied scenario, score the risks, and design a proportionate control for each, working through the same method applied to their own organisation.
4:45 PM - 5:00 PM
Wrap-Up and Q&A
Key takeaways, next steps, and close.
Key Outcomes
- Explain what MS 2764 addresses and how it relates to ISO 37001
- Run a corruption risk assessment at an organisational level and produce a usable risk register
- Integrate corruption risk into an existing enterprise risk management framework
- Design proportionate controls for high-corruption-risk processes
- Set up monitoring and reporting that keeps a corruption risk programme current
- Build a corruption risk register from a working scenario
Training Mode Physical / Online / Hybrid / e-learning
HRD Corp SBL-Khas Claimable
Level Foundation to intermediate. For risk, compliance, internal audit and integrity officers.
Duration 1 Day (8 Hours) | 9:00 AM to 5:00 PM
Venue In-house at the client's premises, or delivered via the client's preferred platform (Microsoft Teams, Zoom, or equivalent)
Assessment A corruption risk register workshop plus a short knowledge check
Certificate Certificate of Completion issued to all participants upon full attendance