ISO 37001 certification in Angola
ISO 37001 is the international standard for anti-bribery management systems. We prepare the company to prevent, detect and respond to bribery risks.
What ISO 37001 is
ISO 37001 sets out the requirements of an anti-bribery management system: bribery risk assessment, policy and financial and non-financial controls, third-party due diligence, gifts and hospitality management, whistleblowing channel and case investigation.
How we prepare the certification
- 01AssessmentReview of the current situation against the standard's requirements and identification of the gaps to close.
- 02Scope and contextDefinition of the certification scope, interested parties and applicable legal requirements.
- 03Process and risk mapProcess design, assignment of owners and assessment of the associated risks and opportunities.
- 04DocumentationPolicy, procedures, instructions and records written for the actual operation, not generic templates.
- 05Training and roll-outTeam training and day-to-day roll-out of the system, with evidence of real use.
- 06Internal auditInternal audit run by network auditors, recording non-conformities and corrective actions.
- 07Pre-auditSimulation of the certification audit and closure of the final gaps, ahead of the independent DQS audit.
Preparing and certifying are separate functions
Export Lab handles the assessment, system design, documentation, training and internal audit. The certification audit is conducted independently by DQS. That separation is what makes the certificate credible to clients, regulators and international partners.
The Angolan context
Companies working with the public sector, with international operators or with external financing are increasingly assessed on the anti-bribery controls they can demonstrate. Certification makes those controls verifiable by third parties.
Cost and timeline: what makes them vary
We do not publish list prices for ISO 37001, because the effort is not the same in two different organisations. The investment always has two separate components: preparation, delivered by Export Lab, and the certification audit, billed by the certification body.
What drives cost: Number of geographies and high-risk counterparties, volume of third parties requiring due diligence, complexity of procurement and expenditure approval processes, and the state of the whistleblowing channel and compliance function.
What drives the timeline: Timeline is set by the bribery risk assessment, implementing third-party due diligence, and the time needed to evidence controls in operation, including training and handling of reports.
After the initial assessment, scope, schedule and price are presented in writing, before any commitment.
What your company gains
- Bribery risk assessed and documented by area.
- Third-party due diligence with written criteria.
- An operational, tested whistleblowing channel.
Frequently asked questions
- Who needs ISO 37001?
- Companies exposed to bribery risk: public sector suppliers, operations using agents and intermediaries, internationally financed projects, and groups with parent-company compliance requirements.
- Is ISO 37001 mandatory in Angola?
- ISO 37001 is voluntary. Criminal and contractual obligations on corruption exist independently of the standard; certification demonstrates preventive controls verified by a third party.
- How much does ISO 37001 certification cost?
- There is no list price. The figure follows from scope and starting point — specifically: Number of geographies and high-risk counterparties, volume of third parties requiring due diligence, complexity of procurement and expenditure approval processes, and the state of the whistleblowing channel and compliance function. Preparation and the certification audit are billed separately, the latter by the certification body.
- How long does ISO 37001 implementation take?
- We do not quote fixed timelines before the assessment. Timeline is set by the bribery risk assessment, implementing third-party due diligence, and the time needed to evidence controls in operation, including training and handling of reports. A realistic schedule is set out in the proposal.
- Who issues the certificate? Does Export Lab also certify?
- No. Export Lab prepares and implements; the ISO 37001 certification audit is conducted independently by DQS. Whoever prepares cannot certify, and that separation is what gives the certificate value with clients and regulators.
- What happens after certification?
- Three-year cycle with annual DQS audits. Periodic due diligence, reporting to the compliance function and governing body, recurring training and internal audit are kept live.
- Does certification protect the company legally?
- Certification is not a guarantee that bribery will not occur, nor a substitute for legal advice. It demonstrates an implemented and audited prevention, detection and response system — frequently required in supplier qualification and financing processes.
1 network specialist in this area
Independent network consultants specialising in Anti-Bribery and Anti-Corruption and ISO 37001.