Bribery can occur in many forms and across different types of business relationships. Risks may arise when an organization deals with public officials, suppliers, contractors, agents, intermediaries, joint ventures, customers, or other business associates. Without appropriate controls, these risks can expose an organization to legal, financial, operational, and reputational consequences.
ISO 37001:2025 – Anti-bribery management systems — Requirements with guidance for use provides a framework for establishing, implementing, maintaining, reviewing and improving an Anti-Bribery Management System (ABMS). It helps organizations identify and address bribery risks, establish appropriate controls, promote an anti-bribery culture and improve their ability to prevent, detect and respond to bribery.
Published in February 2025, ISO 37001:2025 is the second edition of the standard and replaces ISO 37001:2016. It introduces several clarifications and structural changes, including greater emphasis on anti-bribery culture, conflicts of interest, the anti-bribery function, and the latest Harmonized Structure for management system standards.
Organizations already certified to ISO 37001:2016 should plan their transition to the revised edition. Under the transition requirements in IAF MD 30:2025, the transition of certified clients must be completed by 28 February 2027 for certification arrangements within the document’s scope.
ISO 37001:2025 at a Glance
Item | Details |
Standard | ISO 37001:2025 |
Full title | Anti-bribery management systems — Requirements with guidance for use |
Edition | Second edition |
Publication | February 2025 |
Previous edition | |
Management system | Anti-Bribery Management System (ABMS) |
Main purpose | Preventing, detecting and responding to bribery |
Applicability | Organizations of different sizes, types and sectors |
Transition deadline | 28 February 2027 under IAF MD 30:2025 |
Key themes | Anti-bribery culture, conflicts of interest, anti-bribery function, climate action and updated Harmonized Structure |
ISO 37001:2025 can be used by public, private and not-for-profit organizations. Its requirements can be applied to an organization as a whole or to a defined part of its activities, subject to the standard’s requirements and the scope established by the organization.
What is ISO 37001:2025 Certification?
ISO 37001:2025 is an international standard that specifies requirements for an Anti-Bribery Management System (ABMS). An ABMS helps an organization establish processes to prevent, detect, and respond to bribery and manage bribery risks in its activities and business relationships.
The standard applies to organizations of all types and sizes, including public, private, and not-for-profit organizations. It covers bribery involving the organization, its personnel, and business associates, including direct and indirect bribery through third parties. An organization can implement the ABMS as a separate system or integrate it with other management systems.
An ABMS includes activities such as establishing an anti-bribery policy, assessing bribery risks, conducting due diligence, implementing financial and non-financial controls, providing employee training, managing reports and concerns, and investigating suspected bribery. The controls should be appropriate to the organization’s activities and level of bribery risk.
ISO 37001 certification involves an assessment by a certification body against the applicable requirements of the standard. The certificate covers the approved certification scope, including the activities and locations identified in the certification documents. Certification does not guarantee the complete prevention of bribery or replace an organization’s responsibility to comply with applicable anti-bribery laws and regulations.
Request Quotation
Sample Certificate
Request Quotation
Other Standards
Recognition
Sample Certificate
The Evolution of ISO 37001 (2016 to 2025)
Since its first publication in 2016, ISO 37001 has provided organizations with an international framework for managing bribery risks. The standard has evolved to address changes in organizational practices, governance, and compliance expectations.
ISO 37001:2016 — The First Edition: The first edition was published in October 2016. It established requirements for organizations to develop, implement, maintain, and improve an Anti-Bribery Management System. It covered areas such as anti-bribery policies, bribery risk assessments, due diligence, financial and non-financial controls, and employee awareness.
ISO 37001:2016/Amd 1:2024 — Climate Action Amendment: In February 2024, ISO introduced a climate-action amendment requiring organizations to determine whether climate change was relevant to their context. It also recognized that interested parties may have climate-related requirements. This was an amendment to the 2016 edition, not a separate edition of ISO 37001.
ISO 37001:2025 — The Second Edition: Published on 28 February 2025, ISO 37001:2025 is the second edition of the standard. It replaces ISO 37001:2016 and incorporates the 2024 climate-action amendment. The updated edition gives greater attention to anti-bribery culture, conflicts of interest, and the role of the anti-bribery function. It also introduces the latest Harmonized Structure and clarifies several management system requirements.
Why Was ISO 37001 Updated in 2025?
ISO 37001:2025 was developed to keep the Anti-Bribery Management System framework aligned with current organizational and compliance practices. The revision places greater emphasis on building an anti-bribery culture, managing conflicts of interest, and clarifying the responsibilities of the anti-bribery function. The updated edition also introduces a dedicated requirement for planning changes and aligns the standard with the latest Harmonized Structure used by ISO management system standards. The climate-action amendment issued in 2024 is incorporated into the revised edition.
For organizations already certified to ISO 37001:2016, the update provides an opportunity to review existing anti-bribery policies, risk assessments, controls, and employee awareness arrangements. It does not mean that every organization must rebuild its ABMS from the beginning. The work required will depend on the existing system, the organization’s bribery risks, and the changes identified during its review.
What Has Changed in ISO 37001:2025?
ISO identifies the main changes in the 2025 edition as the addition of provisions on climate change and anti-bribery culture, attention to conflicts of interest, clarification of the anti-bribery function, and the introduction of the latest Harmonized Structure.
The following sections explain the principal areas organizations should review when preparing for the revised edition. The precise changes applicable to an organization should be confirmed against the published standard rather than inferred from a general summary.
1. Greater Emphasis on Anti-Bribery Culture — Clause 5.1.3: The 2025 edition introduces a dedicated clause on anti-bribery culture. It emphasizes the role of leadership in developing, maintaining, and promoting ethical behaviour throughout the organization. Top management and the governing body should demonstrate active and consistent commitment to the anti-bribery policy and management system. They should encourage behaviour that supports anti-bribery objectives and should not tolerate conduct that compromises the system.
For example, an organization can promote an anti-bribery culture by communicating its policy, encouraging employees to report concerns, recognizing ethical conduct, and responding consistently to violations. The aim is to make anti-bribery practices part of everyday business activities rather than treating them only as written procedures.
2. Clearer Attention to Conflicts of Interest — Clauses 3.28, 5.3.3 and 7.2.2.1: The revised edition gives more explicit attention to identifying and reporting actual or potential conflicts of interest. It also defines conflicts of interest and addresses them in employment procedures and delegated decision-making. Organizations should make personnel aware of the need to report potential and actual conflicts of interest. Decision-making processes for activities with more than a low bribery risk should also be designed to avoid actual or potential conflicts.
For example, an employee involved in supplier selection may have a financial or family relationship with one of the suppliers. Declaring and reviewing such situations can help the organization identify and manage possible bribery risks.
3. Clarification of the Anti-Bribery Function — Clause 5.3.2: The 2025 edition clarifies the responsibilities and authority of the anti-bribery function. The terminology has also changed from “anti-bribery compliance function” to “anti-bribery function.” The function is responsible for overseeing the design and implementation of the ABMS, checking its conformity with the standard, reporting on its performance, and providing advice on anti-bribery matters. It should have suitable resources, competence, authority, and independence, along with direct and timely access to top management and the governing body.
Organizations should review whether the person or team assigned to this function has the necessary authority and support to carry out these responsibilities effectively.
4. Climate Change Considerations — Clauses 4.1 and 4.2: ISO 37001:2025 incorporates the climate-action requirements introduced through the 2024 amendment. Organizations must determine whether climate change is relevant to their context. They should also consider that relevant interested parties may have climate-related requirements.
For example, an organization involved in infrastructure or climate-related projects may consider whether changing operating conditions, procurement activities, public-sector interactions, or project requirements affect its bribery risk profile. These considerations should be addressed where relevant to the organization’s context and ABMS. The climate-action requirement was already introduced through the 2024 amendment; it is incorporated into the 2025 edition rather than being an entirely new requirement.
5. A Dedicated Requirement for Planning Changes — Clause 6.3: ISO 37001:2025 introduces a dedicated clause for planning changes to the Anti-Bribery Management System. When an organization identifies a need to change its ABMS, it must carry out those changes in a planned manner. Changes to business activities, organizational structure, markets, processes, or business relationships may affect bribery risks and existing controls. Organizations should review these effects before implementing relevant changes.
For example, when entering a new market or acquiring another business, an organization may need to review its bribery risk assessment, due diligence procedures, responsibilities, and operational controls. Planning these changes helps maintain the effectiveness of the ABMS.
6. Updated Harmonized Structure and Related Requirements: ISO 37001:2025 adopts the latest Harmonized Structure used by ISO management system standards. This brings changes to the organization and numbering of some clauses and improves consistency with other standards.
The revised edition also reorganizes and clarifies requirements relating to personnel awareness, training, internal audits, and operational controls. For example, Clause 7.3 separates awareness of personnel, training for personnel, training for business associates, and awareness and training programmes. Clause 8.4 also expressly includes mergers and acquisitions among the areas where non-financial controls may be relevant.
Organizations should review these changes to determine whether their existing procedures and documented information need updating. The revised structure does not mean that every topic is an entirely new requirement; some changes reorganize or clarify requirements that were already addressed in the 2016 edition.
ISO 37001:2016 vs. ISO 37001:2025
The following table summarizes the main areas organizations should review when moving from the 2016 edition to the 2025 edition. It is a high-level comparison, not a substitute for a clause-by-clause assessment of the published standards.
Area | ISO 37001:2016 | ISO 37001:2025 |
Edition status | First edition, published in 2016 | Second edition, published in February 2025 |
Climate considerations | Climate-action requirements added through the 2024 amendment | Incorporates the climate-action amendment into the revised edition |
Anti-bribery culture | Addressed through leadership and anti-bribery system requirements | Introduces a dedicated clause on anti-bribery culture, Clause 5.1.3 |
Conflicts of interest | Addressed in certain decision-making requirements | Gives more explicit attention to identifying and reporting conflicts of interest |
Anti-bribery function | Referred to as the anti-bribery compliance function | Clarifies the role and responsibilities of the anti-bribery function |
Planning changes | Addressed through existing management system arrangements | Includes a dedicated clause for planning changes, Clause 6.3 |
Awareness and training | Includes employee awareness and training requirements | Clarifies and organizes requirements for personnel and business associate awareness and training |
Non-financial controls | Covers relevant operational and business activities | Expressly includes mergers and acquisitions in Clause 8.4 |
Harmonized Structure | Previous structure | Adopts the latest Harmonized Structure and revises some clause headings and numbering |
Transition | Previous edition | Transition under applicable IAF arrangements ends on 28 February 2027 |
Important: The 2025 edition clarifies, reorganizes, and expands attention to several areas. It should not be interpreted as meaning that every topic listed above is entirely new. Organizations should consult the published standard to identify the precise changes relevant to their ABMS.
Which Industries Are Suitable for ISO 37001:2025 Certification?
ISO 37001:2025 can be applied across different industries where organizations may face bribery risks in their business activities, transactions or relationships. It helps organizations establish an Anti-Bribery Management System (ABMS) to identify and address these risks through appropriate policies, procedures and controls. Some industries where ISO 37001 certification can be particularly relevant include:
- Construction and Infrastructure: Construction companies, real estate developers, engineering firms and infrastructure contractors can manage bribery risks related to project approvals, government tenders, construction permits, subcontractor selection and contract awards.
- Government and Public Administration: Government departments, public authorities and public sector organizations can establish anti-bribery controls for public procurement, licensing, regulatory approvals, inspections and administrative decisions.
- Oil, Gas and Mining: Organizations operating in these sectors can manage risks associated with exploration rights, licensing, government permits, procurement contracts, joint ventures and contractor relationships.
- Healthcare and Pharmaceuticals: Hospitals, pharmaceutical manufacturers, medical equipment suppliers and healthcare distributors can address bribery risks involving product approvals, supplier selection, purchasing decisions, distribution agreements and business relationships.
- Manufacturing and International Trade: Manufacturers, exporters, importers and distributors can establish controls for supplier selection, customs clearance, sales agreements, commissions, import-export activities and relationships with overseas business partners.
- Banking and Financial Services: Banks, insurance companies, investment firms and financial service providers can address bribery risks involving financial transactions, intermediaries, client relationships, business partnerships and contract negotiations.
ISO 37001:2025 is suitable for private, public and non-profit organizations of different sizes and sectors. The certification scope should clearly define the organization’s activities, locations, functions and business relationships covered by its Anti-Bribery Management System (ABMS).
Benefits of ISO 37001:2025 Certification
ISO 37001:2025 certification can help organizations demonstrate that their Anti-Bribery Management System has been assessed against the applicable requirements of the revised standard. Its practical value depends on how effectively the organization implements and maintains its ABMS.
- More Structured Bribery Risk Management: An ABMS helps organizations identify, assess, and address bribery risks in their activities and business relationships. It provides a structured approach to establishing anti-bribery policies, responsibilities, and controls.
- Greater Awareness of Ethical Responsibilities: The standard encourages organizations to communicate anti-bribery policies and provide appropriate awareness and training. This helps personnel understand their responsibilities, recognize bribery risks, and know how to report concerns.
- Improved Due Diligence and Business Controls: ISO 37001 supports the use of due diligence and financial and non-financial controls based on identified bribery risks. Organizations can use these arrangements when dealing with suppliers, agents, contractors, consultants, and other business associates.
- Clearer Roles and Accountability: The standard defines responsibilities for top management, the governing body, and the anti-bribery function. Clear responsibilities can help organizations monitor the ABMS and ensure that relevant concerns are reported to the appropriate level.
- Support for Business Relationships: Some customers, business partners, and procurement processes may require organizations to demonstrate their anti-bribery arrangements or provide evidence of ISO 37001 certification. Requirements vary, so organizations should check the specific contract or tender conditions. An effective ABMS can help provide documented evidence of the organization’s approach to managing bribery risks.
- A Framework for Continual Improvement: Monitoring, internal audits, management reviews, and corrective actions help organizations review the effectiveness of their anti-bribery controls and identify areas for improvement. Certification does not guarantee that bribery will never occur, eliminate all bribery risks, or automatically establish compliance with every applicable law. Its value depends on effective implementation and the organization’s circumstances.
ISO 37001:2025 Transition Deadline and Timeline
The International Accreditation Forum (IAF) published IAF MD 30:2025, which sets out the transition requirements for moving from ISO 37001:2016 to ISO 37001:2025. These requirements apply to IAF Multilateral Recognition Arrangement (MLA) signatory accreditation bodies and accredited conformity assessment bodies (CABs) within the scope of the document.
The transition period ends on 28 February 2027. Under the applicable IAF transition requirements, certification bodies must ensure that their clients complete the transition to ISO 37001:2025 by this date. After the transition period ends, accredited certifications to ISO 37001:2016 will no longer be valid under these arrangements.
Date | Transition milestone |
28 February 2025 | ISO 37001:2025 was published |
30 November 2025 | Accreditation bodies were required to be ready to assess against the revised edition and announce their transition process. Certification bodies were required to submit their transition self-declarations to their accreditation bodies by this date. |
28 February 2026 | Accreditation bodies were required to complete the transition of certification bodies. |
31 August 2026 | From this date, initial certification and recertification audits by certification bodies must be conducted against ISO 37001:2025 only. |
28 February 2027 | Certification bodies must ensure that their certified clients have completed the transition by this date. Accredited ISO 37001:2016 certifications are no longer valid after the transition period ends. |
When Should Your Business Start Preparing?
Organizations holding ISO 37001:2016 certification should begin their transition preparations immediately, if they have not already done so. They should contact their certification body to arrange the transition audit well before the final deadline of 28 February 2027.
The 31 August 2026 milestone for initial certification and recertification audits has already passed. Under the applicable transition requirements, these audits must now be conducted against ISO 37001:2025 only. A practical preparation plan is to:
- Obtain and review the published ISO 37001:2025 standard.
- Compare the revised edition with your existing ABMS.
- Review anti-bribery culture, conflicts of interest, and the responsibilities of the anti-bribery function.
- Update relevant policies, risk assessments, procedures, and operational controls.
- Communicate changes and provide training to personnel and relevant business associates.
- Conduct an internal audit and management review of the updated system.
- Agree on a transition audit schedule with your certification body.
- Allow sufficient time to address audit findings and complete the certification decision.
The timing should reflect your existing certification cycle, the changes required in your ABMS, and your certification body’s transition arrangements.
How to Transition from ISO 37001:2016 to ISO 37001:2025
Organizations already certified to ISO 37001:2016 can use the following roadmap to prepare for the revised edition.
Step 1: Review the Published Standard: Obtain and review ISO 37001:2025. Identify the revised requirements and clarifications relevant to your existing Anti-Bribery Management System. Use the published standard as the basis for determining the changes that apply to your organization.
Step 2: Conduct a Gap Assessment: Compare your existing ABMS with the revised requirements. Review areas such as anti-bribery culture, conflicts of interest, the anti-bribery function, planning of changes, employee awareness, training, and operational controls. Identify where documentation or implementation practices need attention.
Step 3: Update Your Anti-Bribery Management System: Revise the relevant parts of your ABMS based on the gap assessment. This may involve updating your anti-bribery policy, bribery risk assessment, due diligence procedures, conflict-of-interest arrangements, responsibilities, training programmes, and financial and non-financial controls.
Step 4: Communicate Changes to Employees: Ensure that personnel understand any revised responsibilities, procedures, and reporting requirements that affect their work. Provide appropriate awareness and training based on their roles and exposure to bribery risks. Relevant business associates should also receive appropriate communication or training where required.
Step 5: Check Implementation and Evidence: Review whether the updated ABMS is being implemented in practice. Relevant evidence may include risk assessment records, due diligence reports, conflict-of-interest declarations, training records, control records, internal audit findings, management review outputs, and corrective actions, as applicable. Address identified gaps before the transition audit.
Step 6: Arrange the Transition Audit: Contact your certification body to agree on the transition arrangements and audit schedule. The audit will assess the ABMS against the applicable requirements of ISO 37001:2025. If nonconformities are identified, the organization must address them in accordance with the certification body’s procedures. The transition is complete only when the applicable certification requirements and decision process have been satisfied within the relevant deadline.
Can the Transition Audit Be Combined with a Surveillance or Recertification Audit?
Yes. Under IAF MD 30:2025, the transition audit can be conducted alongside a scheduled surveillance audit, a recertification audit, or as a separate audit. The most suitable option depends on your certification cycle, the changes required in your ABMS, and the arrangements offered by your certification body. Before confirming the audit schedule, discuss the following:
- Whether your existing audit date can accommodate the transition assessment.
- What additional audit time or evidence may be required.
- Whether your ABMS review and implementation activities will be complete before the audit.
- How any nonconformities will be addressed.
- Whether there is sufficient time to complete the certification decision before the applicable deadline.
The transition audit may also be conducted remotely if the certification body can ensure that the audit objectives are met. Combining audits may help coordinate the assessment with your existing certification cycle, but it does not remove the need to meet the revised requirements.
What Happens If Your Business Misses the Transition Deadline?
Organizations covered by the applicable IAF transition requirements must complete the transition from ISO 37001:2016 to ISO 37001:2025 by 28 February 2027. Certification bodies are responsible for ensuring that their certified clients complete the transition by this date. After the transition period ends, accredited certifications to the 2016 edition will no longer be valid under these arrangements.
This can affect an organization’s ability to demonstrate current accredited ISO 37001 certification to customers, business partners, procurement teams, or other interested parties. The practical consequences will depend on the requirements of the relevant contract, tender, customer, or certification arrangement. Organizations should not assume that every buyer applies identical acceptance rules. To reduce the risk of a delayed transition:
- Start the gap assessment as early as possible.
- Agree on an audit schedule with your certification body.
- Complete the necessary ABMS updates before the audit.
- Allow time to address any audit findings.
- Confirm that the certification decision and updated certificate can be completed within the applicable deadline.
Organizations should contact their certification body promptly if they have not yet planned their transition.
How to Get ISO 37001:2025 Certification
Organizations applying for certification for the first time can prepare their Anti-Bribery Management System against the 2025 edition. Existing certificate holders should follow the transition route applicable to their current certification. A typical certification process includes the following activities.
- Application Review: Submit information about your organization, business activities, locations, and proposed certification scope. The certification body reviews this information to determine the applicable certification requirements and audit arrangements.
- Audit Planning: The audit arrangements are planned according to the organization’s scope, activities, bribery risks, and applicable certification requirements.
- Anti-Bribery Management System Assessment: The audit team evaluates relevant documented information, implementation, and evidence against the applicable requirements of the standard.
- Audit Findings and Corrective Actions: If nonconformities are identified, the organization must address them in accordance with the certification body’s procedures and provide the required evidence.
- Certification Decision: The certification body reviews the audit outcome and determines whether the applicable certification requirements have been met.
- Certificate Issuance: A certificate is issued when the applicable requirements and certification decision process have been satisfied. The certificate identifies the approved certification scope and is subject to the certification body’s procedures.
For more information about the general process, visit the ISO Certification Process page.
Documents to Review Before Transitioning to ISO 37001:2025
There is no single document list that applies identically to every organization. The documented information and records needed depend on the organization’s activities, bribery risks, business relationships, and management system. As part of your transition preparation, consider reviewing:
- Anti-bribery policy and ABMS scope.
- Bribery risk assessment and evaluation records.
- Applicable anti-bribery laws, regulations, and other compliance requirements.
- Roles, responsibilities, and authorities, including the anti-bribery function.
- Conflict-of-interest reporting procedures and declarations.
- Due diligence procedures and records for relevant personnel, transactions, projects, and business associates.
- Financial and non-financial controls.
- Procedures for gifts, hospitality, donations, and similar benefits.
- Anti-bribery commitments and relevant business associate controls.
- Employee awareness and training programmes.
- Training and communication records for relevant business associates.
- Procedures for raising concerns and reporting suspected bribery.
- Investigation procedures and related records, where applicable.
- Monitoring, measurement, and performance evaluation records.
- Internal audit programmes, records, and findings.
- Management review records and resulting actions.
- Nonconformity and corrective action records.
- Documented information supporting the operation and effectiveness of the ABMS.
This is a preparation checklist, not a universal mandatory document list. Review the applicable requirements to determine what your organization needs to maintain or update. For available forms and resources, visit the Guardian ISO Downloads page.
How to Check an ISO 37001:2025 Certificate Is Genuine
An ISO 37001:2025 certificate should be verified to confirm that it was issued by a competent certification body and covers the organization’s approved certification scope. A certification body audits organizations against the standard, while an accreditation body assesses the certification body’s competence and impartiality. Accreditation under an internationally recognized arrangement can provide additional confidence in the certification process.
To check an ISO 37001:2025 certificate:
- Check it with the certification body. Guardian certificates can be verified through our client search.
- Check the certification body’s accreditation. Visit the relevant accreditation body’s directory to confirm its accreditation status and applicable certification scope. Guardian is listed by UAF and IAS for applicable certification activities.
- Check IAF CertSearch. Visit IAF CertSearch, the global database of accredited management system certifications, to check whether the certificate is listed.
Note: Verify that ISO 37001:2025 is covered by the certification body’s current accreditation scope. A certificate’s presence in a database or the certification body’s accreditation status alone does not establish that every certificate is accredited.
Why Choose Guardian as Your ISO 37001:2025 Certification Body
- Accredited by UAF and IAS. Guardian provides management system certification services under applicable UAF and IAS accreditation scopes. Confirm that ISO 37001:2025 is included in the current scopes before applying.
- Auditors who understand your industry. Auditors are assigned based on your organization’s activities, business operations, and bribery risk profile.
- Impartial certification. We audit and certify management systems without providing consultancy on the systems we certify. Certification decisions are reviewed independently.
- Combined audits. Organizations can combine ISO 37001 audits with other applicable management system standards, subject to the relevant accreditation scopes and audit requirements.
- Based in India. Our head office is in Lucknow, Uttar Pradesh, and we provide certification services to organizations across India.
- Certificate transfer support. If you already hold an eligible accredited ISO 37001 certificate from another certification body, you can explore transferring it to Guardian, subject to applicable transfer requirements and review.
Integrating ISO 37001 With Other Management System Standards
Many organizations integrate their Anti-Bribery Management System (ABMS) with other management systems, such as quality, environmental, occupational health and safety, and information security management. An Integrated Management System (IMS) can help coordinate procedures, responsibilities, internal audits, and management reviews while reducing duplicated activities.
Under IAF MD 11, integrated management system audits may allow a reduction in audit time when the applicable integration criteria are met. Guardian Assessment offers certification services for applicable management system standards, including:
- ISO 9001 (Quality Management System)
- ISO 14001 (Environmental Management System)
- ISO 45001 (Occupational Health and Safety Management System)
- ISO/IEC 27001 (Information Security Management System)
- ISO 21001 (Educational Organizations Management System)
Note: Guardian Assessment also provides compliance assessments for specialized frameworks, including ISO 22000 (Food Safety), ISO 13485 (Medical Devices), ISO 50001 (Energy), ISO/IEC 27701 (Privacy), ISO/IEC 20000-1 (IT Service Management), ISO 41001 (Facility Management), ISO 55001 (Asset Management), and ISO/IEC 42001 (Artificial Intelligence). Compliance assessments should not be confused with accredited certification.
Apply for ISO 37001:2025 Certification
Tell us about your organization, its activities, locations, and business relationships. You can apply for ISO 37001:2025 certification independently or combine it with other applicable management system standards, subject to the relevant certification and accreditation requirements.
Frequently Asked Questions
ISO 37001:2025 was published on 28 February 2025. It replaces ISO 37001:2016 and incorporates the 2024 climate-action amendment.
The main changes include a dedicated subclause on anti-bribery culture, more explicit attention to conflicts of interest, clarification of the anti-bribery function, incorporation of climate-action provisions and alignment with the latest Harmonized Structure. The revised edition also includes a dedicated clause on planning changes and related updates to awareness and operational controls.
Under IAF MD 30:2025, initial certification and recertification audits by certification bodies within its scope must be conducted against ISO 37001:2025 only from 31 August 2026. Organizations applying after that date should confirm the applicable certification arrangements with their certification body.
Yes. Under IAF MD 30:2025, the transition may be completed during a scheduled surveillance audit, a recertification audit or a separate transition audit. The available option depends on the certification arrangements and the organization's readiness.
The time required depends on the organization's size, complexity, number of locations, activities, bribery risk profile and readiness of its ABMS. The certification body determines the audit programme and duration based on the relevant requirements and application information.