Best ISO 37001 Certification Body in Malaysia – Get Certified with SCS
https://scscertification.com/contactus.php
Choosing an ISO 37001 certification body in Malaysia requires more than comparing quotations. Organizations need to verify the provider's credentials, understand the proposed certification scope and confirm that the certification arrangement meets their business, customer or tender requirements.
For a Malaysian company seeking to demonstrate its commitment to preventing bribery, these checks can make a practical difference. A certificate may be requested during supplier qualification, contractor prequalification or a business partner's compliance review. Selecting an unsuitable certification arrangement can create additional work if the resulting certificate does not meet the intended requirement.
The Department of Standards Malaysia maintains an accreditation framework that includes Anti-Bribery Management System (ABMS) certification bodies. Organizations should use the relevant official resources to check current accreditation information rather than relying solely on a provider's marketing claims.
This guide explains how Malaysian organizations can evaluate an ISO 37001 certification body, verify its credentials and make a more informed selection.
What Is an ISO 37001 Certification Body?
ISO 37001 is an international standard for Anti-Bribery Management Systems. It establishes requirements and guidance for organizations seeking to prevent, detect and respond to bribery through defined policies, controls, responsibilities and monitoring arrangements.
ISO publishes the standard; independent certification bodies assess organizations against its requirements and make certification decisions under their respective certification arrangements.
Choosing a certification body is therefore different from hiring a consultant to prepare policies, conduct risk assessments or provide employee training. An organization should understand which service it is purchasing and which entity will ultimately issue the certificate.
The appropriate provider depends on the organization's intended certification scope, applicable accreditation requirements and any conditions imposed by customers or tendering authorities.
How to Verify an ISO 37001 Certification Body in Malaysia
Check the Official Accreditation Information
The Department of Standards Malaysia, also known as Jabatan Standard Malaysia, provides information about accreditation schemes and certification bodies. Its resources include information relating to ABMS certification.
Organizations can start with these official references:
Department of Standards Malaysia – ABMS certification programme:
https://www.jsm.gov.my/public/e-integrity/integrity-program/778-memperkenalkan-pelaksanaan-pensijilan-anti-bribery-management-system-abms-ms-iso-37001-di-agensi-kerajaan
Department of Standards Malaysia – Certification Bodies:
https://www.jsm.gov.my/accreditation/resources-accreditation/certification-bodies-acb
Check the current information and determine whether the provider's accreditation status and scope meet your organization's requirements. Accreditation for another ISO standard does not automatically establish accreditation for ISO 37001.
Where a customer requires accredited ABMS certification, verify the relevant scope before signing an agreement. If the requirement comes from a tender, check its exact wording rather than assuming that every certification arrangement will be accepted.
Confirm the Legal Name of the Issuing Entity
A certification provider may operate under a trading name or through several related companies. The entity promoting the service may not necessarily be the entity responsible for issuing the certificate.
Ask for the full legal name of the certification body, its applicable credentials and a way to verify those details independently. Confirm that the information matches the proposed agreement and intended certificate.
If another organization will conduct the audit or issue the certificate, request a clear explanation of its role. This is particularly relevant when the organization has a specific accreditation or customer-acceptance requirement.
Ask About ISO 37001:2025
ISO 37001:2025 was published on 28 February 2025, replacing the 2016 edition. Organizations seeking initial certification or transitioning from an existing certificate should confirm which edition applies to their project.
Ask the certification body how it handles assessments against the 2025 edition and what arrangements apply to existing ISO 37001:2016 certificates.
The Department of Standards Malaysia issued ACB Circular 1/2025 concerning the transition to the revised edition within its accreditation scheme. Organizations should check the circular and confirm the latest applicable arrangements with the relevant certification body.
Official reference:
https://www.jsm.gov.my/images/3-accreditation/resources/acb/document/ACB_Circular_1_2025_-_Transition_ABMS_Issue_1_21_March_2025.pdf
Do not assume that all providers have completed the same transition activities. Confirm the provider's current position and any relevant timing, assessment or cost implications before proceeding.
Assess Whether the Audit Team Understands Your Business
An ISO 37001 audit should consider the organization's actual activities and the way it manages bribery risks. The relevant issues can differ considerably between industries.
A construction contractor in Johor, for example, may need to consider subcontractor relationships, project procurement, tender submissions and commercial intermediaries. A manufacturer in Selangor may have different exposures involving supplier selection, purchasing, sales agents and distribution arrangements.
When discussing a proposal, explain the organization's business activities, locations, structure and intended certification scope. Ask how the audit arrangements will address these operations and what competence is required for the assessment.
The purpose is to establish whether the proposed audit is appropriate for the organization. Certification should depend on the assessment and applicable requirements, not on promises of a guaranteed outcome.
Check the Certification Scope Before Signing
The certification scope should accurately describe the activities and organizational boundaries covered by the proposed certification.
Consider a company with a head office in Kuala Lumpur, a warehouse in Selangor and a project office in Johor. If the organization intends to include all three locations, it should explain their functions and relationship to the management system before the audit arrangements are finalized.
Clarify which legal entity is applying, which activities are included, what locations need to be considered and how relevant outsourced activities will be addressed.
A change in business activities, company structure or site coverage may also affect the certification arrangement. Ask the provider how such changes should be communicated and assessed.
Will the Certificate Meet Malaysian Tender Requirements?
Some Malaysian customers, principal contractors and procurement teams request evidence of an Anti-Bribery Management System. However, the requirements can differ between contracts and supplier-registration programmes.
An ISO 37001 certificate does not automatically guarantee tender eligibility or contract approval. A procurement document may specify the standard edition, certification scope, accreditation conditions or other acceptance criteria.
Before appointing a certification body, review the actual requirement. If the wording is unclear, ask the procurement contact for clarification and share the relevant clause with the proposed provider.
This step can prevent an avoidable problem: obtaining certification and later discovering that the arrangement does not satisfy a specific customer's conditions.
How to Compare ISO 37001 Certification Quotations
Certification costs depend on factors such as the organization's size, number of sites, business activities, operational complexity and audit arrangements. Two quotations should not be treated as equivalent simply because they display similar prices.
Ask each provider to quote against the same business description and proposed scope. Then compare the following:
-
The applicable certification credentials and accreditation scope, where required.
-
The standard edition and any transition arrangements.
-
The proposed audit coverage, locations and activities.
-
The audit team's competence for the intended scope.
-
The services included in the initial quotation.
-
Additional charges, including travel or extra-site costs where applicable.
-
Surveillance and recertification arrangements.
-
The process for verifying the final certificate.
Request written clarification of exclusions, assumptions and potential additional charges. This gives management a more realistic basis for comparing providers across the certification cycle.
Questions to Ask Before Appointing a Certification Body
Before accepting a proposal, ask the provider these questions:
-
What is the full legal name of the entity that will issue the certificate?
-
Where can we independently verify its relevant credentials?
-
Does its applicable accreditation scope cover the required ABMS certification activity?
-
Which edition of ISO 37001 will apply to our project?
-
What transition arrangements apply if we already hold an ISO 37001:2016 certificate?
-
How will our business activities and locations be covered?
-
What audit competence is required for our proposed scope?
-
What is included in the quotation, and which costs may be additional?
-
How will surveillance and recertification be handled?
-
How can the issued certificate be verified?
Clear answers help an organization distinguish between a suitable certification arrangement and a proposal that leaves important questions unresolved.
Discuss Your ISO 37001 Certification Requirements with SCS
SCS can discuss your ISO 37001 certification enquiry and the information needed to assess an appropriate certification arrangement for your organization.
When making an enquiry, prepare your legal company name, business activities, employee strength, locations and proposed certification scope. If certification is required by a customer or tendering authority, provide the relevant written conditions.
Organizations holding ISO 37001:2016 certification should mention their existing status so that the applicable transition arrangements can be discussed.
Where a specific accreditation or customer-acceptance condition applies, verify the proposed certification body's current status and scope before making a final decision.
Get Certified with SCS in Malaysia
Selecting an ISO 37001 certification body should be based on verifiable credentials, a suitable scope and clear audit arrangements. Reviewing these factors before signing an agreement helps your organization make a decision that reflects its operational and commercial requirements.
Contact SCS to discuss your ISO 37001 certification requirements in Malaysia.
Need ISO Certification for Your Business?
Speak with our certification specialists to understand certification requirements, audit process, implementation timelines and accredited certification services.
