ISO 37001:2025 Anti-Bribery Management System Certification in Dubai & UAE

Bribery risk does not stop at the borders of one company. Contractors, consultants, agents, customs brokers and joint-venture partners all create exposure, and a single incident can cost contracts, banking relationships and reputation. ISO 37001 gives organisations in Dubai and across the UAE a recognised framework to prevent, detect and respond to bribery, and an independent certificate to show clients, regulators and partners that the controls are real. BRSM Global supports private and public organisations through the full journey.

Edition status (checked October 2026): ISO 37001:2025 (second edition, published 28 February 2025) is the current edition and replaced ISO 37001:2016. Under the accreditation bodies' transition requirements, certification bodies issue initial and recertification certificates only to the 2025 edition from 31 August 2026, and ISO 37001:2016 certificates are not valid after 28 February 2027. If you hold a 2016 certificate, ask your certification body to schedule your transition now.

What is ISO 37001 Anti-Bribery Certification?

ISO 37001 specifies requirements and provides guidance for establishing, implementing, maintaining, reviewing and improving an anti-bribery management system. It can be used by organisations of any size and sector, public, private or non-profit, and it covers bribery in the public, private and not-for-profit sectors, bribery by the organisation, by its personnel and by business associates acting on its behalf or for its benefit.

The standard follows the common ISO management system structure but adds specific anti-bribery controls: an anti-bribery policy, a compliance function with authority and independence, bribery risk assessment, due diligence on projects and business associates, financial and commercial controls, rules on gifts, hospitality and donations, and procedures for raising concerns and investigating them. It is a management system, so it demonstrates reasonable and proportionate measures; it cannot guarantee that bribery never occurs. It combines naturally with other systems, as discussed in integrated vs consolidated management systems.

Benefits of ISO 37001 for UAE Businesses

Reduced bribery and corruption risk

A structured risk assessment and proportionate controls make improper payments harder to hide and easier to prevent.

Credibility in tenders and supply chains

Large buyers and public-sector bodies increasingly ask suppliers to show how they manage integrity risk.

Protection for leaders and the brand

Documented due diligence, training and monitoring show that management took reasonable steps.

Clearer rules for staff and partners

Plain guidance on gifts, hospitality, facilitation requests and conflicts of interest removes grey areas for employees.

A safer way to speak up

Confidential reporting channels and investigation procedures encourage people to raise concerns early.

ISO 37001 Requirements

The standard requires you to demonstrate:

Context and risk assessment (clauses 4 and 6): understanding the organisation, its business associates and its bribery risks, and setting anti-bribery objectives.
Leadership (clause 5): a governing body and top management that approve the policy, assign responsibility and promote an anti-bribery culture.
Compliance function (clause 5): a person or function with the competence, status, authority and independence to oversee the system and report to the governing body.
Support (clause 7): competent personnel, vetting and training, awareness, communication and documented information.
Operation (clause 8): due diligence, financial, procurement and commercial controls, gifts and hospitality, and reporting and investigation procedures.
Performance evaluation and improvement (clauses 9 and 10): monitoring, internal audit, management review, corrective action and continual improvement.

ISO 37001 Certification Process: How BRSM Global Gets You Certified

Our approach follows the four-stage process that BRSM Global applies to every management system project: guidance, implementation, auditing and post-certification. For ISO 37001 certification, that translates into the following eight practical steps.

Step 1: Free consultation and scope definition

We start with a conversation about your business, sites, activities and customers. We confirm whether ISO 37001 fits your goals, define the scope of certification and agree a realistic timeline.

Step 2: Gap analysis

Our consultants compare your current practices, documents and records with the requirements of ISO 37001. You receive a clear gap report with priorities, so effort goes where it matters.

Step 3: Planning and fixed quote

Based on the gap analysis we prepare a project plan with responsibilities and milestones and a fixed written quote, so you know the investment before work begins.

Step 4: Documentation and implementation

We help you develop the policies, procedures, registers and records the standard requires, in plain language and sized to your organisation, and we help your team put them into daily practice. This is the 'Guidance' and 'Implementation' stage of our process.

Step 5: Training and awareness

Management and staff are trained on their responsibilities under ISO 37001. Where relevant we also train internal auditors, who will later audit your system.

Step 6: Internal audit and management review

Once the system has been operating, we help you run an internal audit and a management review. These are mandatory and give you the chance to fix weaknesses before the external auditors arrive.

Step 7: Certification audit support

The independent certification audit is carried out in two stages. Stage 1 reviews documentation and readiness. Stage 2 verifies implementation on site through interviews, observation and records. We prepare your team and support you during the audit; this is the 'Auditing' stage of our process. Our guide to preparing for a Stage 1 and Stage 2 audit explains what auditors look for.

Step 8: Certificate issue and post-certification support

After any nonconformities are closed, the certificate is issued, normally for three years with annual surveillance audits. We stay with you after certification, advising on changes, standard updates and surveillance audit preparation, which is our 'Post-certification' stage.

Documents Required for ISO 37001

Common documented information includes:

Anti-bribery policy and statement of commitment
Bribery risk assessment and risk register
Roles, responsibilities and compliance function terms of reference
Due diligence procedures and completed due diligence records
Gifts, hospitality, donations and sponsorship procedure and register
Financial and procurement control descriptions
Training and awareness records for staff and, where relevant, business associates
Speak-up and investigation procedures with case records
Internal audit programme and reports
Management review and corrective action records

How Long Does ISO 37001 Take?

A typical ISO 37001 project takes about 3 to 6 months, depending on the number of sites, the complexity of your business associates and how mature your existing compliance controls are. The certification audit has two stages, and the certificate is normally valid for three years with annual surveillance audits.

Who Needs ISO 37001?

This is relevant to a wide range of organisations, including:

Contractors, developers and engineering firms working on public and private projects
Companies that sell to government entities and large corporates
Organisations that use agents, distributors, brokers or intermediaries
Logistics, customs and freight businesses
Public bodies and state-owned entities that want to demonstrate integrity governance

ISO 37001 in Dubai and the UAE

ISO 37001 is not a general legal requirement for every UAE business, but the UAE takes bribery seriously and criminalises it, and integrity governance is a visible topic in government procurement. Public-sector entities in Dubai, including Dubai Municipality and DEWA, publicly state that they hold ISO 37001 certification, and government tenders in the UAE have asked bidders or service providers to address ISO 37001. Where a tender asks for it, the notice itself will say so, so read each requirement carefully.

For companies working with Dubai government entities, free zone authorities or multinational clients, a certified anti-bribery system can simplify supplier due diligence questionnaires. It also helps UAE companies that operate abroad and must consider foreign anti-corruption laws. Our consultants focus on proportionate controls that suit the size of your business, not on a heavy compliance bureaucracy. For help with audit preparation, read how to prepare for a Stage 1 and Stage 2 audit.

Why Choose BRSM Global in Dubai & UAE?

Choosing the right partner is as important as choosing the right standard. BRSM Global is an international inspection, training and certification group with a one-stop approach to ISO and related certifications, and our Dubai team is close to your business.

Local presence in Dubai and the UAE

Our UAE office is at Executive Towers, Tower 1, Office 1102, Business Bay, Dubai. We meet you on site, understand local practice and respond quickly. We also have offices in Riyadh (Al Olaya, Al Faisaliah Tower) and Muscat (Al Khuwair), which helps if your organisation operates across the Gulf.

Proven experience

BRSM Global has completed more than 5,000 projects for over 2,500 clients in more than 10 countries, working with 20+ associations. Our consultants combine hands-on industry experience with deep knowledge of the standards.

Practical systems, not paperwork

We design systems that fit your size and your sector, so your team actually uses them. Explore our Construction sector page and our other industry sectors to see where we work.

Complete one-stop service

From gap analysis and documentation to training, internal audit, certification audit support and ongoing advice, one team supports you at every stage. You can read more about our company on the About Us page or browse practical insights on our blog.

Transparent and independent

We give you a fixed written quote after the gap analysis, explain what is included, and keep consultancy separate from the independent certification audit so that your certificate retains its credibility. Before you commit to any certification body, we recommend you verify its accreditation status for your scope.

Frequently Asked Questions About ISO 37001

What is ISO 37001?

The international standard for anti-bribery management systems. It sets out controls to prevent, detect and respond to bribery.

Is ISO 37001 mandatory in the UAE?

Not for businesses in general. Some clients and tenders may require or favour it, so check the specific requirement.

Does ISO 37001 guarantee that no bribery will occur?

No. It demonstrates reasonable and proportionate measures and a functioning system, which reduces risk but cannot remove it completely.

Do we need a dedicated compliance officer?

The standard requires a compliance function with the right authority and independence. In smaller organisations it can be a part-time role if the competence and independence are real.

How much does ISO 37001 certification cost in the UAE?

It depends on the size of the organisation, the number of sites and the risk profile. We quote after a scoping review.

Can ISO 37001 be combined with ISO 9001 or ISO 27001?

Yes. They share the high-level structure, and many organisations integrate them to avoid duplicating policies and audits.

Related Services

Many organisations combine standards in one integrated management system. You may also be interested in:

For practical background reading, see integrated vs consolidated management systems and how to prepare for a Stage 1 and Stage 2 audit.

Get Your ISO 37001 Certification with BRSM Global

Ready to start your ISO 37001 journey in Dubai or anywhere in the UAE? Tell us about your business and we will respond with a gap analysis plan and a fixed quote.