Strengthening the “G” in ESG with ISO 37001 Anti-Bribery Controls

As global stakeholders demand higher levels of accountability, transparency, and ethical conduct, businesses are under increasing pressure to elevate their Environmental, Social, and Governance (ESG) practices. While much attention is given to environmental and social pillars, it’s the “G” – Governance – that forms the backbone of a credible ESG strategy.

A key component of strong governance is an organization’s ability to prevent bribery and corruption. This is where ISO 37001: Anti-Bribery Management Systems (ABMS) comes in – providing a structured framework to detect, prevent, and address bribery risks. In this article, we explore how ISO 37001 can strengthen the governance aspect of ESG, protect brand integrity, and build stakeholder trust.

👉 Protect Your Business Before It’s Too Late
Compliance deadlines and investigations don’t wait. Weak governance can cost you contracts, loans, and reputation. Our ESG Gap Assessment helps you uncover hidden risks and align with Bursa Malaysia’s evolving sustainability requirements. Contact Us today and take control of your governance before others take control of your future!

What Is ISO 37001?

ISO 37001 is the international standard for anti-bribery management systems, developed by the International Organization for Standardization. It helps organizations establish, implement, maintain, and improve controls designed to:

•  Prevent, detect, and respond to bribery

• Promote an ethical business culture

• Comply with anti-corruption laws and global best practices

It is certifiable, which means companies can undergo third-party audits to validate their anti-bribery systems – an important marker of trust for investors, customers, and regulators.

Why Governance Matters in ESG?

Governance is the foundation of any successful ESG program. Without good governance, environmental and social commitments can fall flat – or worse, become vehicles for greenwashing and ethics violations.

Key governance indicators include:

•  Board independence and diversity

• Anti-bribery and corruption policies

• Executive accountability

• Transparent reporting and whistleblower protection

• Compliance with laws and ethical standards

Poor governance can lead to legal consequences, investor withdrawal, ESG rating downgrades, and reputational damage.

How ISO 37001 Strengthens the “G” in ESG

Let’s look at how ISO 37001 specifically contributes to stronger governance:

1. Establishes a Clear Anti-Bribery Policy

ISO 37001 requires organizations to formalize and communicate a zero-tolerance policy on bribery. This policy becomes a cornerstone of governance, providing a clear ethical standard across all departments and partners.

2. Engages Leadership and Board Accountability

The standard mandates that top management and the board of directors play an active role in the anti-bribery program. This aligns directly with ESG expectations for leadership accountability and ethical oversight.

3. Implements Risk-Based Decision Making

ISO 37001 emphasizes bribery risk assessments as part of business operations – supporting ESG’s broader risk management framework. Organizations learn to identify high-risk areas, such as procurement, sales, or dealings with public officials.

4. Strengthens Compliance and Due Diligence

Companies are required to conduct due diligence on employees, business partners, agents, and vendors – helping mitigate corruption risks across the supply chain and third-party networks.

5. Supports ESG Transparency

ISO 37001 provides structured monitoring, documentation, and audit trails, making it easier to support transparent ESG reporting. This is especially important as ESG disclosures become mandatory in many regions, including Malaysia under Bursa Malaysia’s enhanced sustainability requirements.

6. Promotes a Speak-Up Culture

Whistleblowing channels and incident reporting mechanisms are embedded within ISO 37001, protecting employees and promoting a culture of integrity – key elements of governance in ESG.

ISO 37001 and ESG Ratings

Implementing ISO 37001 can positively influence your ESG ratings from agencies like MSCI, Sustainalytics, FTSE4Good, and EcoVadis. These ratings often assess:

•  Ethics and anti-corruption performance

•  Risk exposure and mitigation strategies

•  Internal controls and governance frameworks

Having a certified ISO 37001 system in place provides verifiable proof that your company is actively managing governance risks – a critical factor for investors and financial institutions.

ISO 37001 in Malaysia and ASEAN Context

In Malaysia and other ASEAN countries, anti-corruption enforcement is tightening. Authorities like the Malaysian Anti-Corruption Commission (MACC) and regional regulators are encouraging businesses to adopt structured anti-bribery frameworks.

ISO 37001 aligns with:

•  Malaysia’s Section 17A of the MACC Act, which imposes corporate liability for corruption

• ASEAN Corporate Governance Scorecard criteria

• Bank Negara Malaysia and Bursa Malaysia ESG compliance expectations

This makes ISO 37001 not just a governance best practice – but a strategic necessity for companies operating in this region.

Steps to Implement ISO 37001 for ESG Impact

If you’re looking to embed ISO 37001 into your ESG strategy, here’s how to get started:

1. Conduct a bribery risk assessment across operations and partnerships.

2. Develop a formal anti-bribery policy endorsed by top leadership.

3. Implement training for employees, suppliers, and agents.

4. Establish controls such as approval hierarchies, gift registers, and due diligence processes.

5. Monitor and review performance through internal audits and management reviews.

6. Pursue third-party certification to build credibility with external stakeholders.

👉 Stay Ahead of Bursa Malaysia’s 2026 ESG Requirements
By 2026, ESG reporting will be mandatory – and governance is under the spotlight. We support you as SMEs with ESG Training and ESG Reporting & Assurance so you can build a robust system that meets Bursa Malaysia’s roadmap and global investor expectations. Don’t wait until regulators or buyers demand it – book your consultation now and secure your competitive edge.

FAQs: ISO 37001 & ESG for Malaysian SMEs

1. Is ISO 37001 mandatory in Malaysia?

Not for every company yet. But the direction is clear:
•  Under MACC Act Section 17A, every company can be held liable for bribery unless it proves “adequate procedures.” ISO 37001 is the strongest defense framework.
•  From 2026, Class G7 construction companies bidding for government projects over RM100 million must have ABMS certification (such as ISO 37001).
•  Air Selangor has ISO 37001 certification in place and embeds ABMS principles into its procurement and governance, with vendors encouraged to align with these standards.
👉 In practice, ISO 37001 is rapidly becoming a must-have for companies that want to secure contracts, financing, and investor trust.

2. Who should seriously consider ISO 37001 now?

• Companies in high-risk sectors: construction, oil & gas, logistics, utilities, government-linked projects.
• Listed companies under Bursa Malaysia’s ESG rules.
• SMEs in supply chains – as banks, MNCs, and buyers increasingly expect anti-bribery controls.

3. How does ISO 37001 benefit SMEs?

• Protects against fines and legal liability under Section 17A.
• Builds trust with banks, investors, and global customers.
• Improves chances in tenders and partnerships, especially with larger corporations or government projects.

4. What’s the first step for SMEs to adopt ISO 37001?
Most SMEs start with an ESG / ISO 37001 Gap Assessment to identify governance risks. From there, implement training, reporting systems, and due diligence processes. Certification can follow once the system is ready.

5. How does ISO 37001 affect ESG ratings and reputation?
Investors and rating agencies (MSCI, Sustainalytics, FTSE4Good, EcoVadis) evaluate governance practices. ISO 37001 gives verifiable proof that your company takes anti-bribery seriously – boosting trust, ESG scores, and access to financing.

Final Thoughts

As ESG evolves from voluntary to mandatory in many regions, companies must strengthen the “G” in ESG to maintain competitiveness and compliance. ISO 37001 offers a globally recognized, auditable framework to embed anti-bribery and ethical governance into your core business.

By implementing ISO 37001, your company sends a clear message: We do business with integrity. We are accountable. We are ESG-ready.

In a world where reputation, transparency, and trust are everything, ISO 37001 helps turn governance from a risk into a powerful differentiator.

👉 Reputation. Compliance. Trust. Secure All Three with ISO 37001
Your brand’s integrity is your strongest currency. ISO 37001 shows investors, regulators, and partners that you run a business built on ethics and accountability. Start with an ESG Gap Assessment or connect with us today!