ISO 37001 Anti-Bribery Controls in Procurement Training Course

Course overview

Procurement decisions can create bribery exposure long before a contract is signed: supplier hospitality, undisclosed beneficial ownership, rushed single-source awards, agent commissions, conflicted evaluators, and weak approval trails can all undermine a defensible tender process. This course addresses the practical challenge of embedding ISO 37001 anti-bribery controls into sourcing, supplier onboarding, purchasing, contract management, and payment approval. Participants learn to identify where procurement controls fail, distinguish normal commercial risk from bribery red flags, and escalate concerns using evidence rather than assumption.

The course translates ISO 37001:2025 requirements into procurement operating controls. Participants work with bribery risk assessments, supplier due-diligence tiers, conflict-of-interest declarations, gifts and hospitality registers, tender evaluation safeguards, approval matrices, contractual anti-bribery clauses, and monitoring indicators. They learn how to document proportionate controls for different supplier and transaction risks, test whether controls operate as designed, and prepare evidence suitable for internal audit, compliance review, or certification readiness.

Instructor-led sessions combine procurement scenarios, control-design workshops, supplier-risk data exercises, and group reviews of tender documentation. Participants use practical templates to assess a procurement process from requisition to payment and identify control gaps. Each participant leaves with a procurement anti-bribery control pack: a risk-and-control matrix, due-diligence decision tree, tender control checklist, and 90-day implementation plan tailored to their organisation or business unit.

The course is designed for experienced procurement, supply chain, compliance, audit, and contract-management professionals who influence supplier selection, purchasing controls, or third-party governance. It is equally useful for managers responsible for demonstrating that anti-bribery commitments are operating in everyday procurement decisions, not only in policy documents.

Course objectives

By the end of this course, participants will be able to:

• Map ISO 37001:2025 anti-bribery requirements to requisition, sourcing, award, contracting, and payment activities
• Conduct a procurement bribery risk assessment using likelihood, impact, control effectiveness, and residual-risk criteria
• Build a supplier due-diligence tiering model using ownership, geography, transaction, intermediary, and public-sector risk indicators
• Design tender-stage controls for conflicts of interest, bidder communications, evaluation integrity, and approval segregation
• Draft procurement-specific anti-bribery clauses, supplier declarations, and contractual audit-right requirements
• Create a procurement risk-and-control matrix with control owners, evidence sources, testing frequency, and escalation routes
• Test gifts, hospitality, sponsorship, and facilitation-payment controls against realistic procurement case evidence
• Produce a 90-day implementation plan for closing prioritised anti-bribery control gaps in a procurement function

Benefits of attending

Target competencies

Who should attend

• Procurement Managers — who own sourcing governance and must make supplier award decisions defensible
• Strategic Sourcing Specialists — who run competitive tenders and need controls over bidder engagement and evaluation
• Supplier Relationship Managers — who oversee third parties requiring proportionate due diligence and monitoring
• Compliance and Ethics Officers — who must translate ISO 37001 requirements into workable procurement controls
• Internal Auditors — who assess whether procurement anti-bribery controls are designed and operating effectively
• Contract and Commercial Managers — who negotiate clauses, approvals, variations, and supplier obligations

Requirements and prerequisites

Participants should have working experience of procurement, sourcing, supplier management, contracts, compliance, audit, or finance controls. The course assumes familiarity with basic procurement stages such as requisition, supplier selection, purchase order, contract approval, and invoice payment, plus an ability to read a policy, workflow, or supplier file. Experience with risk registers, internal controls, or ISO management systems is helpful but not essential. Participants should be comfortable using spreadsheets for simple risk scoring. No prior ISO 37001 certification, legal qualification, specialist investigation training, or access to an enterprise procurement system is required.

Training methodology

The programme is delivered through instructor-led briefings anchored in ISO 37001:2025 clauses and procurement process maps. Participants analyse supplier profiles, tender files, approval workflows, gifts registers, and payment scenarios to identify control weaknesses and decide proportionate responses. Small-group workshops build a due-diligence tiering model, a risk-and-control matrix, and contractual safeguards; instructor feedback tests each design against audit evidence expectations. The final day uses an implementation clinic in which participants sequence actions, assign control owners, and define measures for a 90-day procurement anti-bribery plan.

Course outline

Day 1: ISO 37001 and procurement bribery exposure

• ISO 37001:2025 anti-bribery management system requirements
• Procurement lifecycle mapping from demand to payment
• Bribery, facilitation payments, conflicts, and improper advantage
• Procurement-specific bribery risk scenarios and red flags
• Risk ownership across procurement, compliance, finance, and legal
• Risk appetite, residual risk, and proportional control design
• Evidence requirements for auditable procurement controls

Workshop: Participants map a procurement lifecycle case and produce an initial bribery risk register identifying exposures, owners, and existing controls.

Day 2: Supplier due diligence and third-party controls

• Supplier segmentation and risk-based due-diligence tiers
• Beneficial ownership and politically exposed person screening concepts
• Geographic, sector, transaction, and public-sector risk factors
• Intermediaries, agents, consultants, and success-fee arrangements
• Supplier questionnaires, certifications, and document verification
• Escalation decisions, enhanced due diligence, and approval records
• Ongoing supplier monitoring and trigger-event reassessment

Workshop: Participants build a supplier due-diligence decision tree and apply it to three suppliers with different ownership, country, and engagement risks.

Day 3: Tender, award, and contract anti-bribery controls

• Conflict-of-interest declarations for requisitioners and evaluators
• Bidder communication protocols and controlled clarification logs
• Tender evaluation scoring integrity and moderation records
• Single-source, emergency, and retrospective procurement safeguards
• Segregation of duties and delegated approval authority
• Gifts, hospitality, travel, and sponsorship decision controls
• Anti-bribery contract clauses, audit rights, and termination provisions

Workshop: Participants review a flawed tender pack and produce a corrected control checklist covering evaluator declarations, bidder contact, scoring, and approvals.

Day 4: Control monitoring, reporting, and response

• Procurement anti-bribery risk-and-control matrix design
• Control evidence, sampling approaches, and operating-effectiveness tests
• Key risk indicators for awards, variations, invoices, and exceptions
• Gifts and hospitality register review techniques
• Payment red flags, duplicate invoices, split orders, and unusual commissions
• Speak-up channels, triage, confidentiality, and non-retaliation
• Investigation handover, corrective action, and lessons-learned tracking

Workshop: Participants test a sample set of procurement records and produce a control-testing report with findings, evidence references, and corrective actions.

Day 5: Implementation and audit-ready procurement governance

• Gap assessment against ISO 37001 procurement-relevant requirements
• Control ownership and RACI design for procurement governance
• Procedure writing for due diligence, tender controls, and escalations
• Training and communication plans for buyers and approvers
• Management reporting dashboards and control-performance measures
• Internal audit preparation and evidence-pack assembly
• Ninety-day prioritisation, milestones, and implementation dependencies

Workshop: Participants assemble a procurement anti-bribery control pack and present a 90-day implementation plan for peer and instructor review.

Tools & standards covered

ISO 37001:2025, ISO 37301:2021, Microsoft Excel, Microsoft Power BI

A typical training day

Live online deliveries follow the same structure in the East Africa Time zone, with shorter screen blocks and longer breaks.

What the fee includes

How you can take this course

Certification

Participants who complete the full five days receive the Skillset Development Certificate of Completion, stating the course title, course code, dates and delivery format — suitable for professional-development records and employer reimbursement.

Frequently asked questions