ISO 37001 transition: dates and changes
- Current edition
- ISO 37001:2025
- New edition
- ISO 37001:2025 (replaces ISO 37001:2016)
- Published
- February 2025
- Old certificates expire
- 108 days left
ISO 37001:2016 certificates are no longer valid after 28 February 2027.
Timeline
- Feb 2025ISO 37001:2025 published
- 28 Feb 2026Accreditation transition decisions for certification bodies completed
- 28 Feb 2027All certified organisations must have transitioned
Key changes
- Adopts the latest Harmonized Structure for management system standards
- New subclauses on climate change in context and risk
- Greater focus on compliance culture, showing controls work in practice
- Clearer requirements for identifying and managing conflicts of interest
- Clarified role and concept of the anti-bribery compliance function
Our advice: The deadline is close. If your transition audit is not yet booked, schedule a gap assessment and the transition audit now, certification body capacity tightens near deadlines.
Last checked 28 October 2026. Your certification body confirms the dates that apply to your certificate.
ISO 37001 (current edition ISO 37001:2025) specifies requirements for an anti-bribery management system: policy, a compliance function, bribery risk assessment, due diligence, financial and non-financial controls, gifts and hospitality rules, raising concerns and investigation.
We tailor controls to your real exposure (tendering, licences, customs, intermediaries) and integrate them with existing compliance and quality systems.
Who it is for
- Government contractors and infrastructure firms
- Companies operating in high-risk jurisdictions
- Organisations with large agent or distributor networks
What you gain
- Evidence of adequate procedures under anti-bribery laws
- Due diligence on partners proportionate to risk
- Increasingly requested in public tenders
Your path to certification
Gap assessment
We compare what you do today with every requirement and control, then give you a prioritised gap report and a realistic timeline.
Design and documentation
Scope, policies, procedures, risk methodology and records, written to fit how your teams actually work, not a template binder.
Implementation and training
We help owners put controls in place, train the people who run them and start collecting evidence.
Internal audit and management review
An independent internal audit and a structured management review prove the system works before the certification body looks at it.
Certification audit support
We prepare you for Stage 1 and Stage 2 with your chosen accredited certification body and help close any findings quickly.
Surveillance and continual improvement
Optional managed support keeps evidence current through annual surveillance audits and the three-year recertification.