8.5 Anti-bribery controls for managed organizations

Clause 8.5 of ISO 37001:2016 requires an organization to establish, implement and maintain anti-bribery controls over any external parties it manages, such as suppliers, contractors or joint-venture partners. It mandates defining policies, performing due-diligence, incorporating anti-bribery provisions in contracts and monitoring compliance to mitigate bribery risk.