What the standard requires
- Context analysis and identification of the interested parties.
- Corruption risk assessment by process and by counterparty.
- Anti-corruption policy approved by top management.
- Independent compliance function with authority to report to the Board of Directors.
- Financial and non-financial controls proportionate to the risk.
- Due diligence on shareholders, suppliers, business partners and third parties.
- Ongoing training for directors and employees.
- Whistleblowing: a protected reporting channel.
- Investigations, corrective actions and management review.
When it is useful
- Public bodies and publicly controlled companies (also as a way of integrating Law 190/2012).
- Suppliers to the public administration in tenders where ISO 37001 earns additional points.
- Companies with international exposure (FCPA, UK Bribery Act).
- Organisations that want to integrate it with the 231 Model so that the policies remain consistent.
An integrated approach
Forgest develops the anti-corruption certification integrated with the 231 Model and with any ISO 9001 / 14001 / 45001 systems already in place. The result: a single, coherent body of documentation instead of parallel silos that ignore one another.