What Is ISO 37001 and Why Does It Matter for Hong Kong Businesses?
Bribery and corruption remain serious risks for businesses operating in Hong Kong and across the Greater Bay Area. The Independent Commission Against Corruption (ICAC) continues to strengthen enforcement in the private sector, and regulatory expectations around corporate anti-bribery controls have never been higher.
ISO 37001:2016 is the internationally recognised standard for Anti-Bribery Management Systems (ABMS). It provides organisations with a structured framework to prevent, detect, and respond to bribery — and internal auditors play a critical role in verifying that this framework is working effectively.
DQS Academy's ISO 37001 Internal Auditor Training equips your team with the knowledge and practical skills to plan and conduct ABMS internal audits with confidence.
Why Hong Kong Organisations Cannot Afford to Ignore This
- Prevention of Bribery Ordinance (POBO) — Cap. 201
Under Section 9 of the POBO, it is a criminal offence for an agent — including employees — to solicit or accept advantages without the principal's permission. Organisations that can demonstrate a functioning, regularly audited anti-bribery management system are far better positioned to defend against regulatory scrutiny and reduce corporate liability exposure.
- ICAC Corporate Guidelines
The ICAC actively encourages companies to establish, implement, and periodically review corruption prevention strategies through its Corporate Corruption Prevention Programme. Regular ISO 37001 internal audits directly fulfil this requirement and demonstrate genuine management commitment to ethical business conduct.
- Hong Kong Stock Exchange (HKEX) ESG Reporting
Listed companies in Hong Kong are required under the HKEX ESG Reporting Guide to disclose anti-corruption policies and the measures taken to implement them. A qualified internal auditor and documented audit records provide the most credible and verifiable evidence for ESG disclosure purposes.
- UK Bribery Act 2010 and US Foreign Corrupt Practices Act (FCPA)
Multinational companies with offices in Hong Kong remain subject to the extraterritorial reach of the UK Bribery Act and US FCPA. Training local internal auditors and conducting regular ABMS audits demonstrates to overseas regulators and parent companies that the Hong Kong operation maintains robust anti-bribery controls.
- Greater Bay Area Business Expansion
As Hong Kong businesses increasingly operate across the Greater Bay Area, exposure to varying corruption risk environments grows. A well-trained internal audit function provides the assurance mechanism needed to maintain consistent anti-bribery standards across all operations.
Course Overview
- Course Code: #ABMS-IA2
- Duration: 1.5 Days
- Provider: DQS Academy (Member of DQS Group — Germany)
- Language:Conducted in Cantonese; materials in English
- Certificate: DQS Official Certificate upon successful completion
Training Objectives
By the end of this course, participants will be able to:
- Understand the development background and business benefits of ISO 37001:2016 for Hong Kong organisations
- Interpret ISO 37001 standard requirements clause by clause from an auditor's perspective
- Apply anti-bribery management best practices within their organisation
- Develop the expertise required to implement an ABMS in accordance with ISO 37001:2016
- Plan, conduct, and follow up on ISO 37001 internal audits effectively
Note: This course does not cover the interpretation of specific anti-bribery legislation. For legal advice, please consult a qualified legal professional.
Course Agenda
Part 1 — ISO 37001 Standard Understanding
- General introduction to ISO 37001 — development, scope, and key concepts
- ABMS standard requirements understanding
- — Detailed clause-by-clause requirements interpretation
- — Anti-bribery management best practices
- — Group workshops and practical exercises
- Typical Red Flags identification and risk assessment
- — Red flags commonly found in Hong Kong organisational operations (procurement, hospitality, third-party intermediaries, public official interactions)
- — Typical anti-bribery regulations applicable to Hong Kong enterprises: POBO, ICAC Guidelines, UK Bribery Act, FCPA
- — Interactive case studies drawn from Hong Kong and cross-industry real-life scenarios
- Certification preparation guidance
Part 2 — Internal Audit Practice (exclusive to #ABMS-IA2)
- Role and responsibilities of an ABMS internal auditor
- Developing and managing an internal audit programme
- Audit execution techniques and effective interviewing methods
- Identifying, classifying, and documenting nonconformities
- Writing clear and actionable audit reports
- Corrective action follow-up and verification
- Q&A session and course evaluation
Who Should Attend
- ABMS Auditors and Management Representatives (MR)
Those responsible for planning, executing, and following up on internal audits within an ISO 37001-based management system.
- Managers and Compliance Officers
Senior and middle management responsible for overseeing ABMS implementation and ongoing conformity within their organisation.
- Engineers and Technical Experts
Technical professionals involved in supporting or participating in ABMS audit activities.
- Anti-Bribery Management Consultants
Professional consultants providing ABMS implementation, gap analysis, and internal audit services to client organisations.
- Career Development Professionals
Individuals seeking to enter the anti-bribery management or certification body field and build a recognised professional credential.
Recommended Prior Knowledge
- Experience in ISO 9001 application
- Basic understanding of anti-bribery management principles
- Awareness of the challenges your own organisation faces in implementing anti-bribery controls
Training Approach
- Face-to-face instruction by an experienced, qualified auditor-trainer
- Individual and team-based exercises to reinforce practical application
- English training materials; instruction conducted in Cantonese (unless otherwise specified)
- Interactive discussions using real-life cases from Hong Kong and multiple industries
- Small class sizes to maximise engagement and learning outcomes
Evaluation and Certificate
- Certificate of Attendance
Awarded to participants who attend the full course and complete all assignments, but do not pass the final evaluation. Issued by DQS Academy.
- Certificate of Successful Completion
Awarded to participants who attend the full course, complete all assignments, and pass the final evaluation. This certificate formally recognises the holder's competence in ISO 37001 internal auditing. Issued by DQS Academy.
Frequently Asked Questions
No. This course is self-contained and covers both standard understanding and internal audit practice in full. You can enrol directly without completing any prior ISO 37001 course.
This internal auditor course (1.5 days) is designed for professionals conducting audits within their own organisation. It leads to a DQS Academy certificate and is ideal for in-house compliance teams. The Lead Auditor course (5 days, offered with PECB) is aimed at professionals conducting third-party external audits and leads to an internationally recognised PECB credential.
Financial services (banking, insurance, asset management), construction and engineering, property development, healthcare and pharmaceuticals, government contractors and public works suppliers, and the Hong Kong offices of multinational corporations are among the most common attendees.
Yes. DQS Academy offers customised in-house training tailored to your industry, organisational structure, and specific risk profile. Please contact us for a proposal.
This course builds the internal competence foundation required for certification readiness. ISO 37001 organisational certification requires a formal third-party audit conducted by an accredited certification body such as DQS. Please contact our Hong Kong team for details on the certification pathway and associated fees.
While ICAC does not formally endorse specific training programmes, ISO 37001 is fully aligned with ICAC's Corporate Corruption Prevention Programme guidelines. Completion records and internal audit documentation are widely accepted by regulators, auditors, and business partners as evidence of anti-bribery due diligence in Hong Kong.
Enquire or Register Now
Equip your team with the practical skills to conduct ISO 37001 internal audits — and demonstrate real anti-bribery compliance to the ICAC, HKEX, and international regulators.
Download Course Brochure
Equip yourself with all the details about this training. Save the full course brochure for easy reference and share it with your team.