ISO 37001:2025 Certification in Thailand

ISO 37001:2025 Certification in Thailand helps organizations establish, implement, maintain, and continually improve an Anti-Bribery Management System (ABMS). The standard provides a structured framework to help organizations prevent, detect, and respond to bribery risks while strengthening anti-bribery controls, governance practices, due diligence, training, monitoring, and continual improvement.

ISO 37001:2025 is the current edition of the international Anti-Bribery Management Systems standard. It was published on February 28, 2025, replacing ISO 37001:2016. ISO 37001:2016 and its 2024 amendment are now withdrawn.

For organizations operating in Thailand, an ISO 37001 management system can provide a structured approach to managing bribery risks across business operations, employees, business associates, suppliers, contractors, intermediaries, and other relevant relationships.

What Is ISO 37001:2025?

ISO 37001:2025 is an international standard for Anti-Bribery Management Systems. It specifies requirements and provides guidance for organizations seeking to establish an effective framework to prevent, detect, and respond to bribery.

The standard covers direct and indirect bribery and can be applied by organizations in the public, private, and not-for-profit sectors. ISO identifies key components such as anti-bribery policies, due diligence, financial and non-financial controls, training, monitoring, reporting, and continual improvement.

Organizations can implement ISO 37001 as a standalone management system or integrate it with existing compliance, governance, risk-management, quality, environmental, information-security, or other management systems.

ISO 37001 Certification in Thailand

Organizations in Thailand can implement ISO 37001:2025 to establish a structured Anti-Bribery Management System appropriate to their organizational context and bribery-risk exposure.

Certification provides evidence that an organization's ABMS has been independently assessed against the requirements of ISO 37001.

Intermax Consultancy can support organizations with gap assessment, bribery-risk assessment, ABMS implementation, documentation, awareness training, due-diligence processes, internal-audit preparation, corrective-action support, and certification readiness.

Formal ISO certification is conducted by an independent certification body. Consultancy support and certification are separate activities.

Why Is ISO 37001 Important for Organizations in Thailand?

Organizations can face bribery risks through employees, agents, distributors, suppliers, contractors, consultants, joint ventures, intermediaries, and other business relationships.

A structured Anti-Bribery Management System can help organizations establish consistent controls for identifying and managing these risks.

ISO 37001 can help organizations:

• Establish an anti-bribery policy

• Identify and assess bribery risks

• Establish anti-bribery responsibilities

• Implement financial and non-financial controls

• Conduct appropriate due diligence

• Manage business associates

• Establish reporting and investigation processes

• Provide anti-bribery awareness and training

• Monitor the effectiveness of controls

• Conduct internal audits

• Review ABMS performance

• Implement corrective actions

• Promote continual improvement

Thailand's Office of the National Anti-Corruption Commission has highlighted ISO 37001 as an international anti-bribery framework and notes that its principles were considered in developing guidance concerning appropriate internal control measures for juristic persons.

Benefits of ISO 37001:2025 Certification

Strengthened Anti-Bribery Controls

ISO 37001 provides a structured framework for identifying bribery risks and implementing appropriate controls.

Improved Governance

Defined policies, responsibilities, monitoring activities, due diligence, and management reviews can support a more structured compliance framework.

Better Risk Management

Organizations can use risk-based processes to identify areas where bribery risks may arise and determine appropriate controls.

Business Partner Due Diligence

Organizations can establish processes for assessing relevant business associates and third parties based on their risk profile.

Employee Awareness

Training and awareness programs help employees understand anti-bribery policies, responsibilities, reporting channels, and expected conduct.

Improved Monitoring

Monitoring, internal audits, reviews, and corrective actions help organizations evaluate the effectiveness of their ABMS.

Support for International Business

Organizations working with international customers, suppliers, contractors, and multinational business partners can use ISO 37001 certification as evidence of a structured anti-bribery management framework.

Integration With Other Management Systems

ISO 37001 can be implemented alongside other management systems and compliance frameworks where appropriate.

Key Requirements of ISO 37001:2025

An Anti-Bribery Management System includes several important components.

Anti-Bribery Policy

The organization establishes an appropriate anti-bribery policy and communicates relevant requirements to employees and applicable business associates.

Bribery Risk Assessment

The organization identifies and evaluates bribery risks associated with its activities, locations, relationships, transactions, and business environment.

Leadership and Commitment

Top management and relevant leadership functions establish accountability and demonstrate commitment to the Anti-Bribery Management System.

Anti-Bribery Function

Appropriate responsibilities and authority are assigned for managing and overseeing anti-bribery activities.

Due Diligence

Organizations establish appropriate due-diligence processes for relevant transactions, projects, business associates, personnel, and other relationships based on identified risks.

Financial Controls

Financial controls help reduce opportunities for improper payments and improve oversight of relevant financial activities.

Non-Financial Controls

Non-financial controls address areas such as procurement, recruitment, contracting, business relationships, and other processes where bribery risks may arise.

Training and Awareness

Relevant personnel receive appropriate anti-bribery training and awareness based on their responsibilities and risk exposure.

Reporting and Investigation

Organizations establish appropriate mechanisms for raising concerns and addressing suspected or identified bribery issues.

Monitoring and Review

The organization monitors the effectiveness of its Anti-Bribery Management System and performs appropriate reviews and audits.

Continual Improvement

Corrective actions, performance evaluations, audit findings, management reviews, and lessons learned support continual improvement of the ABMS.

ISO describes these elements as part of the framework for preventing, detecting, and responding to bribery.

ISO 37001 Certification Process in Thailand

The certification process generally involves the following stages:

1. Initial Consultation

The organization's business activities, structure, locations, relationships, and certification objectives are reviewed.

2. Define the Certification Scope

The organization determines which activities, departments, locations, projects, and business processes are included within the ABMS.

3. Bribery Risk Assessment

Relevant bribery risks are identified, assessed, and prioritized according to the organization's operational environment.

4. Gap Assessment

Existing anti-bribery controls and compliance practices are compared against ISO 37001:2025 requirements.

5. ABMS Development

Policies, procedures, controls, responsibilities, due-diligence processes, reporting mechanisms, and documented information are developed or improved.

6. Implementation

The Anti-Bribery Management System is implemented across relevant functions and business operations.

7. Training and Awareness

Employees and relevant business associates receive appropriate awareness and training.

8. Internal Audit

Internal audits are conducted to assess conformity and effectiveness of the Anti-Bribery Management System.

9. Management Review

Top management reviews the performance and effectiveness of the ABMS and determines appropriate improvement actions.

10. Certification Audit

An independent certification body conducts the formal assessment against ISO 37001:2025 requirements.

11. Corrective Actions and Certification

Any identified nonconformities are addressed according to the certification body's process. Following successful completion of the certification process, the certification body issues the certificate for the approved scope.

Who Can Obtain ISO 37001 Certification in Thailand?

ISO 37001:2025 can be relevant to organizations across many sectors, including:

• Manufacturing companies

• Construction companies

• Engineering organizations

• Trading companies

• Import and export businesses

• IT companies

• Software companies

• Financial services

• Banking and insurance

• Healthcare organizations

• Pharmaceutical companies

• Energy companies

• Oil and gas organizations

• Logistics companies

• Transportation businesses

• Real estate companies

• Hospitality businesses

• Professional-services firms

• Government-related organizations

• Non-profit organizations

• Public-sector entities

• Multinational companies

• Organizations working with international suppliers and customers

The standard is designed for public, private, and not-for-profit organizations.

ISO 37001 for Manufacturing Companies in Thailand

Manufacturing organizations may interact with suppliers, contractors, distributors, agents, logistics providers, procurement teams, and other third parties.

An Anti-Bribery Management System can help establish structured controls around procurement, contracting, third-party relationships, payments, gifts and hospitality, reporting, and due diligence.

The exact controls should be determined according to the organization's identified bribery risks and business context.

ISO 37001 for Construction and Engineering Companies

Construction and engineering organizations may manage complex procurement processes, contractors, subcontractors, consultants, project partners, and other business relationships.

ISO 37001 can provide a framework for assessing relevant bribery risks and implementing appropriate controls across project and corporate activities.

ISO 37001 for Financial and Professional Services

Financial institutions, consulting companies, legal-service providers, accounting firms, insurance companies, and other professional-service organizations can use ISO 37001 to establish systematic anti-bribery controls appropriate to their activities.

The standard can complement existing governance, compliance, risk-management, and internal-control arrangements.

ISO 37001 and Business Associates

Third-party relationships can create important compliance considerations.

An ISO 37001 framework can help organizations establish risk-based processes for assessing and managing business associates such as:

• Agents

• Distributors

• Contractors

• Consultants

• Suppliers

• Joint-venture partners

• Intermediaries

• Service providers

• Representatives

The extent of due diligence and controls should be proportionate to the identified risk.

ISO 37001 Consultancy in Thailand

Intermax Consultancy provides support for organizations preparing to implement ISO 37001:2025 in Thailand.

Consultancy services may include:

• ISO 37001 gap assessment

• Anti-bribery risk assessment

• ABMS implementation

• Anti-bribery policy development

• Documentation support

• Due-diligence process development

• Financial-control guidance

• Non-financial-control guidance

• Business-associate risk management

• Employee awareness training

• ISO 37001 training

• Internal-audit support

• Corrective-action guidance

• Management-review preparation

• Certification-audit preparation

• Continual-improvement support

The implementation approach can be adapted according to the organization's size, industry, locations, business relationships, and bribery-risk profile.

ISO 37001 Training in Thailand

Training and awareness are important components of an effective Anti-Bribery Management System.

ISO 37001 training can help relevant employees understand:

• ISO 37001:2025 requirements

• Anti-bribery policies

• Bribery risk identification

• Due diligence

• Financial controls

• Non-financial controls

• Business-associate management

• Reporting mechanisms

• Investigation processes

• Roles and responsibilities

• Internal auditing

• Corrective actions

• Continual improvement

Training should be appropriate to the individual's responsibilities and exposure to bribery risks.

ISO 37001 Audit Support in Thailand

Internal audits can help organizations evaluate whether the Anti-Bribery Management System has been implemented and maintained effectively.

Intermax Consultancy can support organizations with internal-audit planning, audit preparation, identification of potential gaps, corrective-action guidance, and certification-readiness activities.

Internal audits should be performed by competent personnel and should provide objective information for improving the management system.

ISO 37001 and Other ISO Standards

ISO 37001 can be integrated with other management-system standards where appropriate.

For example:

ISO 9001: Quality Management System

ISO 14001: Environmental Management System

ISO 45001: Occupational Health and Safety Management System

ISO/IEC 27001: Information Security Management System

ISO 22301: Business Continuity Management System

ISO 37001: Anti-Bribery Management System

An integrated management-system approach can help organizations align common activities such as document control, risk assessment, internal auditing, management review, corrective actions, objectives, and continual improvement.

ISO 37001:2016 vs ISO 37001:2025

ISO 37001:2025 is the current edition and has replaced ISO 37001:2016. ISO's official page records the 2016 edition as withdrawn and identifies ISO 37001:2025 as the new published version.

Organizations currently maintaining an older ISO 37001:2016 certification should discuss the transition requirements and timeline with their certification body.

For new certification projects, organizations should plan against ISO 37001:2025 rather than the withdrawn 2016 edition.

Why Choose Intermax Consultancy?

Intermax Consultancy provides ISO consultancy, implementation, training, gap assessment, internal-audit support, and certification-readiness services.

For ISO 37001 projects, the consultancy approach can include understanding the organization's bribery-risk environment, assessing existing controls, developing the Anti-Bribery Management System, supporting implementation, training relevant personnel, preparing for internal audits, and assisting with certification readiness.

Intermax lists ISO 37001 among its anti-bribery management-system consultancy and certification services.

Intermax Consultancy does not itself replace the independent certification body. Formal ISO certification is performed by an independent certification body.

Frequently Asked Questions

What is ISO 37001 certification?

ISO 37001 certification demonstrates that an organization's Anti-Bribery Management System has been independently assessed against the applicable requirements of ISO 37001.

Is ISO 37001:2016 still valid?

No. ISO 37001:2016 has been withdrawn. The current edition is ISO 37001:2025, published on February 28, 2025.

What is the current ISO 37001 standard?

The current published standard is ISO 37001:2025 – Anti-bribery management systems — Requirements with guidance for use.

Who can obtain ISO 37001 certification in Thailand?

Organizations in the private, public, and not-for-profit sectors can implement ISO 37001 where an Anti-Bribery Management System is relevant to their activities and risk environment.

Is ISO 37001 mandatory in Thailand?

ISO 37001 is an international management-system standard and certification is not universally mandatory for every organization. Organizations should separately assess applicable Thai laws, regulations, contractual obligations, procurement requirements, and other compliance obligations.

Does ISO 37001 guarantee that bribery will never occur?

No. ISO 37001 establishes a management-system framework designed to help organizations prevent, detect, and respond to bribery. Certification does not guarantee that an organization will never experience a bribery incident.

Can ISO 37001 be integrated with ISO 9001?

Yes. Organizations can integrate ISO 37001 with other management systems where appropriate, using common processes such as risk management, internal audit, management review, corrective action, and continual improvement.

Does Intermax Consultancy issue ISO 37001 certificates?

Intermax Consultancy provides consultancy, implementation, training, and certification-readiness support. Formal certification is conducted by an independent certification body.

Start Your ISO 37001 Certification Journey in Thailand

Strengthen your organization's Anti-Bribery Management System with a structured approach based on ISO 37001:2025.

Intermax Consultancy can support organizations in Thailand with bribery-risk assessment, ABMS implementation, documentation, due diligence, employee training, internal-audit support, corrective actions, and certification readiness.

Contact Intermax Consultancy to discuss your organization's ISO 37001:2025 certification scope and implementation requirements in Thailand.