ISO 37001

ISO 37001

1. General Requirements


Certification scheme of ISO 37001 auditor is available without restriction to all individuals worldwide who satisfy the certification requirements.


To have credibility accredited certification needs competent auditors. The purpose of GPC Anti-bribery Management Systems ABMS Auditor Certification Program is to provide confidence to accredited certification and to business and industry that auditors certified to this program are competent. As part of the certification process GPC will evaluate applicants against requirements which reflect the key skills, knowledge and experience that define competence and which you, the ABMS auditor, need to have and demonstrate during an audit. ABMS auditor program is based on the following standard:



ISO 37001:2016, Anti-Bribery Management Systems –

Requirements and the auditing guidance standard:

ISO 19011:2018, Guidelines for auditing management systems






1) Auditor Characteristics
Problem solving skills, close attention to detail, cultural sensitivity, ability to work independently and in a group or on a team.
2) Resource Management
Identify and apply techniques for scheduling people, events, logistics, and audit related activities.
3) Conflict resolution
Identify typical conflict situations (disagreements, auditee delaying tactics, and interruptions) and determine the techniques for resolving them, such as negotiation and cool-down periods.
4) Communication techniques
Select and use written and oral communication techniques in various applications, such as technical reports, active listening, empathy, and paraphrasing.
5) Interviewing techniques
Define and apply appropriate interviewing techniques (e.g., when to use open-ended and closed question types, determining the significance of pauses and their length, and when and how to prompt a response), based on various factors, such as when supervisors are present, when interviewing a group of workers, and when using a translator.
6) Team membership, leadership, and facilitation
Define and use various techniques to support team-building efforts and to help maintain group focus, both as a participant and as a team leader. Recognize and apply the classic stages of team development (forming, storming, norming, and performing). Identify various team member roles and apply coaching, guidance, and other facilitation techniques necessary to effective team functioning.
7) Presentation techniques
Define and apply various tools and techniques such as graphs, charts, diagrams, and multimedia aids for written and oral presentations made at opening, closing, and other meetings.
8) Verification and validation
Define, distinguish between, and apply various methods of verifying and validating processes.



3. Anti-Bribery Management System Auditor Requirements


1) Basic Requirements



* The requirements of training certificate are as followings:

• Certificate of successful completion of applied management system lead auditor training course from GPC approved, which meet the procedure of training provider.
• Certificate of successful completion of applied management system lead auditor training course provider by ISO/IEC 17024 accredited as a personnel certification body.
• Certificate of successful completion of applied management system lead auditor training course from training institution approved personnel certification body as based on ISO/IEC 17024.



4. Examination


1) About the exam


The exam consists of two types of written exams, Knowledge exam and Attribution test.


The exam is performed at a place that GPC evaluated and finally approved in advance. (it will be notified prior to the exam).


The applicants should be arrived at the examination site at least 10 minutes before the start and if late or absent, 0 score is automatically given.


Any ID card with picture on it for the identification of the candidate has to be presented, and any prohibited items at the examination site have to be left with the invigilator before the star of the exam.


If cheating is detected, the invigilator will ask the candidate to leave immediately and no more exam is allowed.


Please see the exam notification for the details about the examination location and contact information.


2) Knowledge exam


This exam questions were set up based on ISO 37001:2016 standard and the purpose of the exam is to evaluate the qualifications and competence of the candidate who wants to conduct audit activity by the standard the candidate is applying for.


The knowledge exam has a total of 100 questions and consists of 4 sections divided.


1 point for 1 correct answer and the pass criteria is as follows.


  • Section I (ISO 37001:2016): more than 20 points out of 50 points.
  • Section II (ISO 19011:2018): more than 12 points out of 30 points.
  • Section III (Standard Specific Questions): more than 4 points out of 10 points.
  • Section IV (Case Study): more than 4 points out of 10 points.
  • Total: more than 70 points out of 100 points.

* Even if the total points are more than 70 points, the applicant cannot pass the exam without meeting the minimum points required for each section.



Time limitation is only 120 minutes for the examination and it is open-book(Received Hard copied standard from GPC) condition.


If one is failed in the exam, candidate is given one more chance of examination. If candidate fails to the consecutive examination, the candidate has to wait another year to take examination.



3) Attribution test


The purpose of the attribution test is to evaluate the characteristics and the qualification as an auditor and it asks how much the application understandable agree with the questions.


It is based on ISO 19011:2018 and consists of 25 questions only. The candidate should choose the answer that comes to mind first.


Up to 4 points are given for each question and as the answer is further from the correct answer, 1 point each is deducted. (0 point for no answer)


The pass criterion is 70 points


If one is failed in the test, another chance of re-examination(written test) is given. If candidate fails to the attribution re-examination, candidate has to wait another year to take an test.