Conoce la nueva versión de la norma ISO 37001:2025: Cambios, requisitos y cómo adaptarse con éxito

Overview of the Video

The video titled “Conoce la nueva versión de la norma ISO 37001:2025: Cambios, requisitos y cómo adaptarse con éxito” presents an in-depth overview of the updates in the ISO 37001:2025 anti-bribery management system standard. It focuses on key changes, their implications, and practical guidance for successful adaptation.

---

Main Financial Strategies, Market Analyses, and Business Trends

• ISO 37001 certification is highly strategic in Peru, which leads globally in the number of certifications. This is driven by state incentives such as additional points in bidding processes.
• The trend is increasing as companies seek competitive advantages in public and private tenders.

Business Benefits of ISO 37001

• Enhanced corporate reputation and trustworthiness in ethical business practices.
• Increased assurance of business continuity by managing bribery risks.
• Compliance with legal and regulatory requirements, including anti-bribery laws.
• Competitive edge in tenders and client acquisition, especially from larger clients with strict compliance filters.
• Stronger due diligence and management of business partners and suppliers to mitigate bribery risks.

---

Key Changes and Requirements in ISO 37001:2025

1. Integration of Climate Change Considerations (Chapters 4.1 & 4.2)

• Organizations must explicitly assess climate change as an internal/external issue and consider related stakeholder needs or expectations.
• Climate change is recognized as a potential factor that can indirectly increase bribery risks (e.g., disruptions causing opportunities for bribery in logistics or maintenance).
• Methodologies such as SWOT, PESTEL, AMOFIT, or Porter’s Five Forces can be used to analyze these impacts.
• Organizations must document whether climate change affects them or not to demonstrate audit readiness.

2. Leadership and Commitment (Chapter 5)

• Enhanced focus on promoting an anti-bribery culture at all organizational levels.
• Senior management must actively demonstrate commitment, promote ethical behavior, and communicate the importance of the anti-bribery system internally and to business partners and stakeholders.
• The anti-bribery culture is now a formal requirement, including sanctions for non-compliance documented in codes of ethics or internal policies.

3. Risk Management (Chapter 6)

• Risks related to bribery must consider internal/external issues, including climate change.
• New requirement 6.3: Planning of Changes mandates that any changes to the anti-bribery management system must be planned, documented, and controlled, similar to ISO 9001’s approach.
• Risk assessments should include bribery scenarios triggered by external factors like climate change.

4. Awareness, Training, and Communication (Chapter 7)

• Expanded requirements for training and awareness:
  • Staff must receive anti-bribery training at induction and at planned intervals.
  • Training content is now separated into awareness (understanding policies, risks, reporting) and formal training (recognizing bribery, prevention, indicators).
  • Business partners (suppliers, contractors, intermediaries) must also be trained based on risk criteria.
• Communication must be clear, documented, and include procedures for document control.

5. Internal Audits and Impartiality (Chapter 9)

• Internal audits must be conducted at least annually, with some organizations opting for biannual audits.
• Auditors must be competent and impartial; they cannot audit their own work area.
• The anti-bribery function cannot audit itself; external or independent internal auditors should audit the anti-bribery management system.
• Audit programs should ensure objectivity and avoid conflicts of interest.

6. Continuous Improvement and Non-Conformities (Chapter 10)

• The order of requirements has been aligned with other ISO standards:
  • 10.1 Non-conformities
  • 10.2 Continuous improvement
• Emphasis on documenting and addressing non-compliance and improving the system continually.

---

Methodology / Step-by-Step Guide to Adapt to ISO 37001:2025

Step 1: Understand and Communicate Changes

• Inform all relevant staff, especially those in key positions and processes, about the updates in the standard.
• Emphasize new requirements such as climate change considerations and anti-bribery culture.

Step 2: Update Risk Assessments and Stakeholder Analysis

• Incorporate climate change and related risks into internal/external context analysis.
• Identify stakeholders with climate-related requirements or expectations.
• Document all findings clearly, including if climate change is not relevant.

Step 3: Revise Policies and Procedures

• Update anti-bribery policies to reflect the new requirements on leadership commitment and culture.
• Include sanctions and guidelines in codes of ethics or internal regulations.
• Define roles clearly, especially for the anti-bribery function (compliance officer).