ISO 37001 Foundation — course at a glance
- Course
- PECB ISO 37001 Foundation
- Standard
- ISO 37001:2025 — anti-bribery management systems
- Duration
- 2-day equivalent, 10–15 hours self-paced
- Prerequisites
- None
- Exam
- 1 hour, closed book, 40 multiple-choice questions, 100 points, 70% to pass
- Materials
- 200+ pages
- CPD
- 14 credits
- Credential
- PECB Certificate Holder in ISO 37001 Foundation
- Price
- $730 + GST self-paced; $810 + GST eLearning
What is an anti-bribery management system?
An anti-bribery management system (ABMS) is the set of policies, controls, records and responsibilities an organisation uses to prevent, detect and respond to bribery. ISO 37001 is the international standard that says what one has to contain.
It is worth being clear what it is not. ISO 37001 does not certify that an organisation is free of bribery, and it makes no claim that bribery has not occurred or will not occur. What it certifies is that a system designed to prevent bribery exists, is proportionate to the organisation’s risk, and is being operated and improved. That distinction is the first thing an auditor will test and the first thing a Foundation candidate is examined on.
What are the core principles of anti-bribery management?
PECB’s Foundation syllabus examines six principles that run through the whole standard.
- Proportionate procedures. Controls scale to the bribery risk actually faced — sector, country, transaction type, counterparty. A uniform control set applied everywhere is a sign the risk assessment was skipped.
- Risk assessment. Bribery risk is identified, analysed and evaluated before controls are chosen, not after.
- Top-level commitment. The governing body and top management are accountable, and Clause 5 puts that on them by name rather than on a compliance officer.
- Due diligence. Applied to transactions, projects, business associates and personnel where the assessed risk is more than low.
- Communication. Internal and external, including to business associates whose conduct can create liability.
- Monitoring and review. The system is tested and improved rather than written once and filed.
What do Clauses 4 to 10 of ISO 37001 require?
ISO 37001 follows the same high-level structure as ISO 9001, ISO 14001 and ISO 27001, which is why organisations already certified to one integrate it comparatively easily.
How is the ISO 37001 Foundation exam structured?
One hour, closed book — no standard, no notes, no course materials. 40 multiple-choice questions worth 100 points, and 70% to pass.
Three quarters of the exam is on the requirements themselves. Candidates who spend their study time on the history of anti-bribery legislation tend to be surprised — learn the clause structure and what each one demands. Figures are from PECB Candidate Handbook version 3.0.
Passing makes you a PECB Certificate Holder in ISO 37001 Foundation. This is a certificate program rather than a certification, so no professional experience is required and there is no credential ladder.
Why ISO 37001 matters in Australia right now
Australia strengthened its foreign bribery laws through the Crimes Legislation Amendment (Combatting Foreign Bribery) Act 2024, which commenced in September 2024. Two changes matter for anyone running an anti-bribery programme.
- A corporate offence of failing to prevent foreign bribery. A company can now be liable where an associate — an employee, contractor, agent, subsidiary or other party performing services for it — bribes a foreign public official for the company’s benefit. Liability does not require the company to have known.
- A defence of “adequate procedures”. It is a defence for a body corporate to prove it had adequate procedures in place designed to prevent the conduct. The Attorney-General’s Department publishes guidance on what adequate procedures look like.
Be precise about what that means. ISO 37001 certification is not the defence and no standard can be. The defence is adequate procedures, judged on the facts. What an ABMS built to ISO 37001 does is produce the documented, tested, independently audited evidence that such procedures existed and operated — a bribery risk assessment, due diligence records, financial and non-financial controls, a whistleblowing channel, training records, and management review minutes. That is the evidence a company would need to point at. Whether it is sufficient in any given case is a legal question for lawyers, not a training provider.
Alongside the Commonwealth offence, AUSTRAC’s AML/CTF regime, ASIC’s oversight, whistleblower protections under the Corporations Act, and the Commonwealth Procurement Rules all push in the same direction: an organisation is expected to be able to show its controls, not assert them.
What does ISO 37001 certification cost in Australia?
Two different things carry the name. Certifying yourself as a practitioner is training plus an exam: Foundation is $730 + GST self-paced or $810 + GST with eLearning, exam voucher and one free resit included.
Certifying your organisation is separate: an accredited certification body audits your ABMS in two stages and issues a three-year certificate with annual surveillance. Cost scales with headcount, sites, and the number of countries and sectors in scope — bribery risk assessment is jurisdiction-sensitive in a way most standards are not, so an organisation operating across several markets pays more than its size alone would suggest.
Should I start with Foundation or go straight to Lead Implementer?
Neither has prerequisites. Take Foundation if you sit on a compliance, legal, risk or internal audit team and need to understand the standard well enough to contribute — it is also a practical way to find out whether anti-bribery work suits you.
Go straight to Lead Implementer if you will actually build the ABMS, or Lead Auditor if you will audit one. Both are five-day equivalents with an 80-question exam and 31 CPD credits against Foundation’s 14.
What is included for $730 + GST
Aegentra Academy is an official PECB authorised training partner. Courses are bought online and studied at your own pace from anywhere in Australia — Melbourne, Sydney, Brisbane, Perth, Adelaide, Canberra or regional — with the exam sat under remote proctoring. For group enrolments, email Academy@aegentra.com.au to request a written quote confirming the current price, payment terms and inclusions before purchase.