FAQ

ISO 27001 What are the Focus Points of ISO/IEC 27001:2013 Implementation? • Systematically examine the organization’s information security risks, taking account of the threats, vulnerabilities, and impacts; • Design and implement a coherent and comprehensive suite of information security controls and/or other forms of risk treatment (such as risk avoidance or risk transfer) to address those risks that are deemed unacceptable; and • Adopt an overarching management process to ensure that the information security controls continue to meet the organization’s information security needs on an on-going basis. Who all are eligible for ISO 27001 Certification? The organizations requiring robust controls with regards to Confidentiality, Integrity and Availability of the data can implement ISO 27001 ISMS. Generally the organizations from the field of Information • Technology, • Research, • Development, • Design Services, • Financial services Can avail ISO 27001 certification. In most of the cases, it is a specific requirement stated by their customer. How will ISO/IEC 27001 Certification Benefit your Organization? • Compliance with confidentiality, integrity, and availability of data • Recognition by overseas customers • Mandatory requirement for being an out-sourcing sub-contractor to the parent company • Satisfaction and Retention of Valuable Customers • Compliance with business, legal, contractual, and regulatory requirements • Improved structure and focus with respect to information security What is the validity of the ISO 27001 Certification? • The validity period for an ISO 27001 standard is 3 years with an annual surveillance audit for monitoring the ISMS.

ISO 37001

What are the Focus Points of ISO 37001 Implementation?

  • Anti-bribery policies and procedures, including those around gift-giving, hospitality, donations, and other such benefits
  • An effective compliance team to oversee the anti-bribery program
  • A strong tone at the top with management-level leadership on, commitment to, and responsibility for anti-bribery
  • Anti-bribery risk assessments
  • Controls to mitigate bribery risks (including financial, procurement, commercial, and contractual controls)
  • Training and awareness on anti-bribery policies and measures
  • Due diligence on projects, transactions, personnel, and business associates/ third parties with a high risk of bribery
  • Procedures for reporting, investigating, and reviewing suspected or actual bribery
  • Continuous monitoring and regular audits

What are the documents required for ISO 37001 certification?

The organization shall demonstrate continual improvement in the field of Anti Bribery management systems by maintaining, establishing, implementing and providing documented information.

The documented information required for ISO registration

  • The organization’s Anti-bribery scope
  • The organization’s Anti-bribery policy and Anti-bribery Objectives
  • Anti Bribery Management Manual
  • Standard operating Procedures for anti-bribery management system
  • Anti-Bribery risk management

Records at individual process/department. E.g. Sales, Purchase, Production, Quality Assurance, Maintenance, Customer Service.

Who all are eligible for ISO 37001 Certification?

  • Manufacturing units
  • Service sector including Educational institutes, Hospitals, and other service-providing units
  • Trading units
  • Any other business units were irrespective of nature of business, size, and location.

How will ISO 37001 Certification benefit your Organization?

  • Compliance to Anti Bribery policy & Ethical working practices
  • Recognition by overseas customers
  • Mandatory requirement for being an out-sourcing sub-contractor to the parent company
  • Compliance with business, legal, contractual, and regulatory requirements
  • Improved structure and focus with respect to Business Ethics and Anti bribery Management System

How did ISO 37001 evolve throughout the year?

  • Year 2016 – 1st Edition of ISO 37001:2016 Anti Bribery Management System (ABMS) published

What is the validity of the ISO 37001 Certification?

  • The validity of the ISO 37001 Certification is 3 Years & One year is the frequency of ISO audit for ISO 37001 Standards during the validity period.

What is the purpose of ISO 37001?

  • ISO 37001 can be used by any organization, large or small, public, private, or non-profit, and in any country. It is a versatile tool that can be tailored to the size and nature of the organization, as well as the bribery risk it faces.

Is it possible to integrate ISO 37001 with other management systems?

  • Anti Bribery Management System can be a stand-alone system or integrated into an already implemented management system such as Quality Management System i.e. ISO 9001. The effective and precise implementation of the Anti Bribery Management System (ABMS) ensures certification of the organization by Internationally Accredited Certification Body.

What is the difference between ISO 37001 and ISO 19600?

  • ISO 37001 and ISO 19600, which was adopted in 2014, have two significant variances. To begin with, ISO 19600 is a Type B standard, which means it is only recommended, but ISO 37001 is a Type A standard, which means it has mandatory standards that may be verified and certified. Second, although DIN ISO 37001 concentrates on a particular key compliance issue, ISO 19600 is a generic standard that establishes suggestions for compliance programmer that address a variety of difficulties.

ISO 37001 certification can be granted by whom?

  • This organization cannot be certified by ISO because it is evaluated by entities outside of ISO. CASCO, ISO’s Committee on Conformity Assessment, has compiled a list of certification standards that certifying bodies use to issue ISO 37001 certification to enterprises.