Resources for ISO 37001 Anti-Bribery

ISO 37001 Clause 7.1

Resources for the ABMS - people, time, budget and tools. A short clause but with practical consequences.

ISO 37001 Clause 7.1 - Resources

Clause 7.1 is one of the shortest clauses in the standard. It requires the organisation to determine and provide the resources needed for the ABMS - including establishment, implementation, maintenance and continual improvement.

What Resources Means in Practice

For the ABMS, the resource demand falls into a few areas. People - the anti-bribery function, the lead role, time from those involved in due diligence, training time across the workforce. Tools - registers, training materials, document control. Budget - external advice on higher-risk transactions, training delivery, certification body fees, occasional investigation costs. Time - from top management for policy review and management review, from operational managers for control implementation, from staff for awareness training.

The clause does not require documented information on its own but evidence of resourcing usually appears across other parts of the ABMS - the anti-bribery function being properly staffed (Clause 5.3.2), training records showing time has been allocated (Clause 7.2 and 7.3), and management review minutes confirming resources are adequate (Clause 9.3).

The resource question that gets missed most often is time. The anti-bribery function being assigned to a senior person without protected time to do the work is one of the commonest weak points. The clause expects resources including time to be available to the function actually doing the work.

If your anti-bribery lead has the title but no diary slot, the resource is not really there. The clause is asking for a system that can actually be run, not just one that exists on paper.

Practical Compliance Guidance

Resource adequacy is reviewed at management review and recorded against ABMS performance. Where shortfalls are identified, actions are added to the issues and actions register.

The documents below capture resource considerations for the ABMS.

alphaZ document	How to use it
ISO 37001 Toolkit	Complete documentation set for ISO 37001:2025 compliance, including the anti-bribery policy, the PP-1-19 Anti-bribery procedure, risk assessment, audit checklists and all supporting registers and anti-bribery forms.
F-Q3 ABMS Management Review	Includes review of resource adequacy as part of the management review of ABMS performance.
ER1 Issues Actions Register	Records resource shortfalls identified during management review with assigned actions and owners.
F-IMS34 Anti-bribery Compliance Register	Captures the periodic review of the ABMS including resource adequacy.

Note - all the above files can be downloaded with an alphaZ subscription.

Frequently Asked Questions

Does Clause 7.1 require documented information?

No, the clause is short and does not require specific documents. But evidence that resources have been considered usually appears in management review records and in the operation of the anti-bribery function itself. An ABMS that demonstrably runs is the strongest evidence that resources have been provided.

How do small organisations meet Clause 7.1?

By scaling resources to risk. A small organisation with a low bribery risk profile can satisfy this clause with a part-time anti-bribery role and modest training time. The standard requires resources to be reasonable and proportionate, which mirrors the wider proportionality principle in Clause 4.4.

What if management review identifies a resource gap?

The gap is recorded as an action with an owner and target date. The standard does not require resources to be perfect, but it does require gaps to be recognised and addressed. Recording the gap and the action is more important than pretending the gap does not exist.

UK Legislation

The following UK legislation creates the legal context that resource decisions sit within. Adequate procedures under the Bribery Act 2010 implies adequate resourcing.

Further Resources