ISO 37001 Certification in Singapore – Get Certified with SCS

Contact SCS for ISO 37001 Certification

Companies operating in Singapore may work with suppliers, contractors, consultants, distributors and business partners across multiple markets. These relationships create commercial opportunities, but they can also expose organisations to bribery risks involving procurement decisions, commissions, gifts, hospitality, contract negotiations and third-party payments.

ISO 37001 certification in Singapore helps organisations establish a structured Anti-Bribery Management System (ABMS). The standard provides a framework for identifying bribery risks, assigning responsibilities, implementing controls, investigating concerns and improving anti-bribery practices.

For companies responding to customer governance requirements, managing complex supplier relationships or strengthening internal controls, ISO 37001 can provide independently assessed evidence of an established anti-bribery management system.

SCS can be contacted to discuss the proposed certification scope, applicable standard edition and assessment arrangements for your organisation.

What Is ISO 37001 Certification?

ISO 37001 is the international standard for anti-bribery management systems. It sets out requirements and guidance for establishing, implementing, maintaining and improving measures designed to address bribery risks.

An organisation can apply the standard to its own activities and relevant business relationships according to its operations, risk exposure and defined management system scope.

An ISO 37001 management system may include:

• Bribery risk assessments and risk-based due diligence.

• An anti-bribery policy and clearly assigned responsibilities.

• Controls for gifts, hospitality, donations and sponsorships.

• Financial and non-financial approval procedures.

• Employee awareness and competence.

• Reporting channels and investigation procedures.

• Internal audits, management reviews and corrective actions.

Certification involves an independent assessment of the management system against the applicable standard. It does not guarantee that bribery will never occur, and it does not replace an organisation's legal obligations.

Why ISO 37001 Certification Matters for Singapore Businesses

Singapore is an international centre for finance, trade, technology, logistics and regional business operations. Companies based here may manage commercial relationships involving multiple countries, making consistent anti-bribery controls important to their governance arrangements.

Better Control Over Procurement and Vendor Selection

Procurement risks can arise when employees select suppliers, approve invoices, negotiate contract terms or accept benefits from vendors.

An ISO 37001-aligned system helps organisations establish approval limits, document supplier decisions, assess relevant risks and manage conflicts of interest.

For example, a manufacturing company in Tuas may introduce documented vendor due diligence, independent approval of significant purchases and a process for declaring personal relationships with suppliers.

Stronger Oversight of Third Parties

Agents, consultants, distributors and subcontractors may represent a company or help it secure business. Their conduct can expose the organisation to risks that are not immediately visible to senior management.

Risk-based due diligence, suitable contractual controls and ongoing monitoring can help identify concerns before a business relationship creates a larger problem.

Clearer Accountability Across Departments

An anti-bribery policy needs to be supported by practical responsibilities and procedures. Finance, procurement, sales, human resources and senior management may each have distinct duties within the system.

Defined responsibilities help employees understand which transactions require approval, how to report concerns and when additional checks are necessary.

Support for Customer and Tender Requirements

Some customers and tender processes ask suppliers to demonstrate formal anti-bribery controls or provide evidence of a structured compliance programme.

ISO 37001 certification may support these discussions. However, acceptance depends on the customer's or tender's specific requirements, and certification does not guarantee a contract award.

Consistent Controls Across International Operations

Singapore-based companies may work with overseas customers, suppliers and regional partners. An anti-bribery management system can establish consistent internal expectations while allowing the organisation to consider the specific risks of different markets and business relationships.

ISO 37001 and Singapore's Anti-Bribery Context

Singapore has a legal framework for addressing corruption, alongside guidance that helps organisations strengthen their preventive controls.

SS ISO 37001 in Singapore

Singapore's national adoption of the anti-bribery management system standard is known as SS ISO 37001. Businesses planning a new implementation or transition should confirm the applicable edition and certification arrangements with their chosen certification body.

The standard is voluntary, although particular customers, tenders or contractual arrangements may request certification or other evidence of anti-bribery controls.

Official resource: CPIB – SS ISO 37001.

Singapore's Prevention of Corruption Act

The Prevention of Corruption Act 1960 addresses corruption offences in Singapore's public and private sectors. Organisations must understand the legal obligations relevant to their operations and seek qualified legal advice where necessary.

ISO 37001 can support a structured approach to bribery prevention, but certification does not itself establish legal compliance or provide immunity from enforcement.

Official resource: CPIB – Prevention of Corruption Act.

CPIB Guidance for Businesses

The Corrupt Practices Investigation Bureau (CPIB) publishes resources that help organisations understand corruption risks and strengthen preventive measures. Businesses can consider relevant guidance when reviewing procurement procedures, financial approvals, reporting channels and internal controls.

Such guidance complements, but does not replace, the requirements of the applicable standard or advice on legal obligations.

Which Businesses Should Consider ISO 37001 Certification in Singapore?

ISO 37001 can be relevant to organisations of different sizes and types. Its value depends on bribery exposure, third-party relationships, customer expectations and governance objectives.

Manufacturing and Industrial Companies

Manufacturers may manage raw-material suppliers, equipment purchases, subcontractors, maintenance agreements and substantial procurement budgets. Controls over vendor selection, gifts, conflicts of interest and purchasing approvals can help address bribery risks.

Relevant locations include Jurong, Tuas and Woodlands.

Construction, Engineering and Infrastructure

Construction and engineering businesses may work with consultants, subcontractors, suppliers and project partners. Their risk areas can include tender decisions, contract variations, procurement and the appointment of intermediaries.

ISO 37001 can help establish documented approval processes, due diligence and clear reporting responsibilities.

Banking, Financial Services and Fintech

Financial services and fintech companies may engage consultants, technology providers, business introducers and regional partners. The standard can support anti-bribery governance within these relationships.

It should not be treated as a replacement for other applicable financial-crime, cybersecurity or regulatory compliance programmes.

Logistics, Freight and Supply Chain

Freight forwarders, warehouse operators, shipping-related service providers and distribution businesses may work with numerous suppliers and intermediaries.

Relevant controls may include third-party checks, expense approvals, documented commercial decisions and escalation procedures for suspicious requests.

Trading, Import and Export Companies

Trading companies may use distributors, overseas agents and consultants to develop markets or secure contracts. Risk-based due diligence and oversight of commissions can help organisations assess how these relationships are managed.

Information Technology and Professional Services

IT providers, recruitment companies, consultants and other professional services firms may rely on referrals, subcontractors, sales commissions and client entertainment.

An anti-bribery management system can clarify acceptable business conduct, approval requirements and reporting arrangements.

Healthcare, Education and Not-for-Profit Organisations

Healthcare providers, education institutions, charities and other not-for-profit organisations may face bribery risks associated with procurement, donations, sponsorships, partnerships or service-provider appointments.

The management system should reflect the organisation's actual activities and the risks associated with its relationships.

Singapore Locations and Business Hubs Relevant to ISO 37001

ISO 37001 certification is not restricted to a particular Singapore district. The proposed certification scope should reflect the organisation's activities, sites and management arrangements.

These locations are examples of Singapore business hubs, not separate certification categories. Companies operating across multiple sites should determine which locations and activities are included in their proposed scope.

How to Get ISO 37001 Certified in Singapore

The certification process should be based on the organisation's actual operations and bribery risk profile.

Step 1: Define the Certification Scope

Identify the legal entity, business activities, departments, sites and operations covered by the anti-bribery management system.

A Singapore trading company, for example, may need to consider procurement, finance, sales, third-party agents and overseas commercial relationships.

Step 2: Conduct a Bribery Risk Assessment

Identify where bribery risks could arise in procurement, sales commissions, contract awards, gifts and hospitality, donations, sponsorships and relationships with intermediaries.

The assessment should be proportionate to the organisation's size, operating model and exposure.

Step 3: Review Existing Policies and Controls

Examine the current anti-bribery policy, procurement procedures, expense controls, contracts, supplier checks, reporting channels and investigation arrangements.

A gap analysis can identify where existing processes meet the standard's requirements and where additional controls or evidence may be needed.

Step 4: Establish Policies and Responsibilities

Ensure that anti-bribery expectations are documented, responsibilities are assigned and employees know how to seek guidance or report concerns.

Management oversight should be appropriate to the organisation's structure and risk profile.

Step 5: Implement Operational Controls

Introduce controls suited to the risks identified. These may include due diligence for relevant business associates, approval procedures for gifts and hospitality, financial and non-financial controls, conflict-of-interest declarations, appropriate contractual provisions, reporting channels and investigation procedures.

The organisation should retain records showing that the controls are applied in practice.

Step 6: Train Employees and Relevant Business Associates

Training should explain the organisation's policy, common bribery scenarios, reporting channels and individual responsibilities.

For example, procurement employees may need guidance on supplier gifts and purchasing decisions, while sales teams may need examples involving commissions and intermediaries.

Step 7: Conduct Internal Audit and Management Review

Evaluate whether the system has been implemented and whether its controls are appropriate for the identified risks.

Internal audit findings, reported concerns, monitoring results and corrective actions should be reviewed by relevant management personnel. Identified weaknesses should be addressed and documented.

Step 8: Arrange the Certification Assessment

Contact SCS to discuss your organisation's proposed scope, applicable standard edition and assessment requirements.

The certification provider should explain the assessment stages, evidence requirements and process for handling nonconformities. Certification is granted only when the applicable requirements and certification decision process have been satisfied.

Documents and Records Needed for ISO 37001 Certification

The organisation should maintain evidence showing how it identifies bribery risks and operates its anti-bribery management system.

Relevant documents and records may include:

• Anti-bribery policy and supporting procedures.

• Bribery risk assessment records.

• Responsibilities and authority arrangements.

• Due diligence records for relevant business associates.

• Gifts, hospitality, donations and sponsorship records, where applicable.

• Financial and non-financial approval controls.

• Employee competence and training records.

• Reporting and investigation procedures.

• Internal audit plans, findings and follow-up.

• Management review records.

• Nonconformity and corrective action records.

• Monitoring and evaluation information.

The objective is not to create paperwork solely for an audit. Documents should reflect genuine business processes and provide evidence that controls operate as intended.

How Much Does ISO 37001 Certification Cost in Singapore?

The cost of ISO 37001 certification depends on the organisation's size, scope, number of sites, operational complexity and bribery risk exposure.

A company operating from one office with a limited range of activities may require a different assessment effort from a group managing multiple sites, overseas agents, extensive procurement and complex third-party relationships.

For a quotation, prepare the following information:

• Legal entity name and principal business activities.

• Employee numbers and organisational structure.

• Number and locations of sites to be included.

• Proposed certification scope.

• Existing anti-bribery policies and management systems.

• Complexity of third-party and cross-border relationships.

Contact SCS to discuss the proposed scope and confirm whether the required certification services and applicable arrangements are available for your organisation.

How Long Does ISO 37001 Certification Take?

The timeframe depends on organisational readiness, the scope of the system, the complexity of operations and the work required to demonstrate that controls are implemented.

An organisation with established governance processes and complete records may be better prepared than one developing its risk assessment, policies and reporting arrangements for the first time.

The overall process can include gap assessment, implementation, training, internal audit, management review, certification assessment and closure of any nonconformities. A realistic timeline should be discussed after reviewing the organisation's requirements.

Choosing an ISO 37001 Certification Provider in Singapore

Before selecting a certification provider, verify that its certification scope and accreditation arrangements match your needs.

Check whether the provider offers certification against the applicable ISO 37001 edition, whether its accreditation covers the relevant certification activities where applicable, whether the proposed scope reflects your operations, and what assessment, corrective action and surveillance arrangements apply.

Do not assume that every provider offering ISO certification is accredited for ISO 37001. Verify accreditation claims directly with the relevant accreditation body.

For broader provider-selection information, see the existing SCS article: Top 10 ISO Certification Bodies in Singapore.

That article serves a general comparison intent. This page focuses specifically on ISO 37001 certification enquiries, anti-bribery management and Singapore business requirements.

For standard-specific information, refer to the official CPIB SS ISO 37001 resource.

Get ISO 37001 Certified with SCS

If your organisation wants to formalise its anti-bribery controls, respond to customer governance expectations or strengthen oversight of suppliers and business associates, ISO 37001 may be worth considering.

SCS can be contacted to discuss the organisation's activities, proposed certification scope and assessment requirements. Confirm the availability of the relevant certification service and applicable accreditation scope before proceeding.

Start your ISO 37001 certification enquiry today.

Contact SCS