Integrity Management System

ISO 37001:2025 Implementation.

Establish a structured anti-bribery management system covering governance, risk assessment, due diligence, controls, reporting and continual improvement.

Business context

What this capability solves

Anti-bribery management system implementation and certification-readiness support for organizations seeking stronger integrity governance.

EBP Integra delivery principle

Advice, controls, technology, governance, evidence and operating procedures are designed together so the capability can be sustained after implementation.

Deep-dive capabilities

Capability model

The service can be scoped as a focused engagement or combined into a broader enterprise programme.

Gap Assessment

Assess current integrity, anti-bribery and evidence practices against target requirements.

Scope & Governance

Define leadership accountability, anti-bribery function, roles and decision rights.

Bribery Risk Assessment

Identify business, geography, transaction, third-party and decision risks.

Due Diligence & Controls

Implement proportionate due diligence, financial/non-financial controls and approval safeguards.

Speak-up & Investigation Process

Align reporting, case handling, non-retaliation and corrective actions.

Certification Readiness

Support internal audit, management review, remediation and audit preparation.

Reference operating model

How the capability fits together

Final scope, control ownership and delivery model are confirmed during discovery.

Governance & Scope

Objectives, applicability, decision rights, owners, policies, risk appetite and acceptance criteria.

Assessment & Design

Evidence collection, gap/risk analysis, target controls, architecture, procedures and prioritized roadmap.

Implementation

Controls, documentation, workflows, integrations, configuration, training and remediation.

Assurance & Operations

Testing, evidence, management reporting, escalation, review cadence and continuous improvement.

Controls & governance

Defined management-system scope and context
Leadership roles and governance
Risk/opportunity assessment
Documented policies, procedures and controls
Competence, awareness and communication
Monitoring, internal audit, corrective action and management review

Priority use cases

Anti-bribery certification
Board/integrity governance uplift
Third-party integrity controls
High-risk transaction governance
Post-investigation remediation
Customer/investor assurance

Key deliverables

Gap report
ABMS scope/governance
Bribery risk assessment
Policies/procedures
Due diligence/control pack
Audit/readiness pack

Integration considerations

Enterprise risk/GRC
Policy/document management
Asset/data/AI inventories
Incident and issue management
Training records
Evidence repository

Implementation

Phased delivery

Each phase produces decision-ready evidence and clear ownership for the next stage.

1. DiscoverConfirm scope, stakeholders, obligations, evidence, dependencies and risk drivers.

2. Assess & DesignAnalyze current state, define target controls and agree the implementation roadmap.

3. ImplementDeploy controls, documents, workflows, training and required technology/integration.

4. Assure & OperateValidate effectiveness, close residual gaps, hand over and establish recurring governance.

Outcome and KPI framework

Risk treatment completionDue diligence coverageControl exceptionsInvestigation/action closureInternal audit findings