Free PECB ISO 37001 Foundation Practice Questions

Sample Practice Questions

Try these 10 sample questions from the PECB ISO 37001 Foundation practice bank. Each includes the answer and explanation. Continue with the interactive practice above to review the full question set.

1. 1How can an ISO 37001:2025 anti-bribery management system relate to an organization's existing management framework?

   1. A.It may operate independently or be integrated with the existing framework.Correct answer: A
   2. B.It must operate independently of every existing management framework.
   3. C.It must replace the existing framework before controls can be introduced.
   4. D.It may be integrated only when the existing framework covers bribery alone.

   Explanation: "It can function as a stand-alone or be seamlessly integrated into an organization’s existing management framework." Both forms are available; integration does not require replacing the framework.

   Reference: ISO 37001:2025 Anti-bribery management systems — p. 3, What is an anti-bribery management system?

2. 2An outsourced process relevant to the ABMS changes unexpectedly. How should operational planning treat that change under PECB's guidance?

   1. A.Manage the unintended change as part of operational control.Correct answer: A
   2. B.Manage the change only if it was planned in advance.
   3. C.Leave the change outside control because a provider performs the process.
   4. D.Consider the change only when the outsourcing agreement has ended.

   Explanation: "Operational Planning and Control: Managing planned and unintended changes, including outsourced activities." The guidance includes unintended changes and outsourced activities in operational planning and control.

   Reference: Strengthening Anti-Bribery Management Systems: Operation, Evaluation, and Improvement — Operation: Planning and Controlling Activities

3. 3A not-for-profit foundation asks whether ISO 37001:2025 is restricted to commercial companies. What is the correct scope conclusion?

   1. A.It applies to public bodies but not to foundations.
   2. B.It can apply to a not-for-profit foundation.Correct answer: B
   3. C.It applies to a foundation only if it makes a profit.
   4. D.It applies to a foundation only if government-owned.

   Explanation: "The standard addresses bribery in the public, private and not-for-profit sectors" The scope includes not-for-profit organizations; a foundation need not be a profit-making company or government-owned.

   Reference: ISO 37001:2025 Anti-bribery management systems — p. 3, What is an anti-bribery management system?

4. 4An internal audit identifies gaps in an ABMS. What can its findings provide for performance evaluation?

   1. A.Evidence about how the system functions and where gaps existCorrect answer: A
   2. B.A management decision that replaces the audit findings
   3. C.A list of audit criteria without examining the system
   4. D.A restatement of policies without evaluating implementation

   Explanation: "Regular audits assess how well the ABMS is functioning, identify gaps, and ensure top-level oversight through management reviews." Findings report the system's operation and gaps; criteria, policies and management decisions have different roles.

   Reference: Strengthening Anti-Bribery Management Systems: Operation, Evaluation, and Improvement — Evaluation: Monitoring and Corrective Actions

5. 5What does ISO's 2025 overview indicate about an ISO 37001-certified anti-bribery management system?

   1. A.It can support proportionate measures while bribery risk remains.Correct answer: A
   2. B.It makes investigation of future allegations unnecessary.
   3. C.It establishes that bribery risk has been eliminated.
   4. D.It must operate separately from existing management systems.

   Explanation: "While certification doesn’t guarantee the complete eradication of bribery in your organization, it can help you implement robust and proportionate measures that substantially reduce bribery risks and effectively manage any incidents that arise." Certification can support measures without eliminating risk. ISO also states: "It can function as a stand-alone or be seamlessly integrated into an organization’s existing management framework." Thus a separate system is not the only option.

   Reference: ISO 37001:2025 Anti-bribery management systems — p. 7, What about certification?

6. 6An internal audit finds a repeated failure to follow an anti-bribery control. What is the purpose of corrective action?

   1. A.Correct the individual case without addressing its cause.
   2. B.Identify the cause and take action to prevent recurrence.Correct answer: B
   3. C.Identify the cause but take no action to address it.
   4. D.Close the finding while leaving the cause unresolved.

   Explanation: "Any issues found should be addressed promptly by identifying root causes and implementing measures to prevent recurrence." Corrective action addresses the underlying cause and recurrence, beyond correcting or closing the individual case.

   Reference: Strengthening Anti-Bribery Management Systems: Operation, Evaluation, and Improvement — Evaluation: Monitoring and Corrective Actions

7. 7An organization is selecting an ISO document specifically for guidance on a whistleblowing management system. Which is the relevant document?

   1. A.ISO 37001:2025
   2. B.ISO 37002:2021Correct answer: B
   3. C.ISO 37301:2021
   4. D.ISO 37009

   Explanation: "ISO 37002:2021, Whistleblowing management systems – Guidelines, provides guidance for establishing, implementing and maintaining an effective whistleblowing management system based on principles of trust, impartiality and protection." The other standards address related but distinct anti-bribery, compliance, and conflict-of-interest systems.

   Reference: ISO 37001:2025 Anti-bribery management systems — p. 7, What other standards can help with compliance?

8. 8Reports of suspected bribery rise after a new reporting channel is introduced. What can a review of this and other ABMS metrics help the organization do?

   1. A.Identify a trend to investigate in context.Correct answer: A
   2. B.Conclude that actual bribery has risen by the same amount.
   3. C.Conclude that every report describes an actual bribe.
   4. D.Conclude that reporting controls caused the underlying misconduct.

   Explanation: "Ongoing review of key metrics—such as incidents, audit results, and training completion—helps identify trends and shape future improvements." A trend can guide investigation and improvement, but report counts alone do not establish the cause or truth of each report.

   Reference: Strengthening Anti-Bribery Management Systems: Operation, Evaluation, and Improvement — Evaluation: Monitoring and Corrective Actions

9. 9A supplier promises a personal favor to an employee in exchange for an improper contract decision. The favor has no fixed cash price. What does ISO's 2025 overview indicate about the form of a potential bribe?

   1. A.An undue advantage can be non-financial.Correct answer: A
   2. B.An undue advantage must be cash.
   3. C.An undue advantage must have a fixed price.
   4. D.An undue advantage must exceed a minimum value.

   Explanation: "Bribery can happen anywhere, involve any amount and encompass both financial or non-financial advantages or benefits." A non-financial favor can be relevant to bribery risk; applicable law and the surrounding facts determine the legal outcome.

   Reference: ISO 37001:2025 Anti-bribery management systems — p. 3, What is an anti-bribery management system?

10. 10How should an organization adapt its ABMS as bribery risks evolve?

    1. A.Review and update policies, controls, and training to reflect the new risks.Correct answer: A
    2. B.Keep policies and controls fixed after their initial approval.
    3. C.Wait for every risk to cause an incident before updating training.
    4. D.Remove risk assessment from the improvement process.

    Explanation: "Regularly update policies, controls, and training to reflect new risks, regulations, and best practices." Continual improvement keeps the measures responsive to changing conditions.

    Reference: Strengthening Anti-Bribery Management Systems: Operation, Evaluation, and Improvement — Improvement: Continuous Anti-Bribery Progress