ISO 37001:2025 transition: what changes and how much time you have. The International Organization for Standardization published ISO 37001:2025 in February 2025, the second edition of the anti-bribery management systems standard, replacing the 2016 edition. The revision keeps the same structure, intent and core requirements: the changes refine and clarify, they do not reinvent. If your organization is already certified to ISO 37001:2016 and applies it effectively, you are well positioned for the transition.
Transition deadline (what you need to know first)
- Publication date: February 2025
- Transition deadline: February 28, 2027
- Validity of 2016 certificates: all certified sites must complete the transition to the 2025 edition before the deadline; after that date, certificates under the 2016 edition are no longer valid.
In one sentence: the deadline is shorter than it looks. Plan your transition within your next surveillance or recertification cycle to avoid accumulating risk close to February 2027.
What changes from ISO 37001:2016 to 2025?
The impact on already-certified sites is minimal, but it is worth knowing the adjustments:
- Anti-bribery culture. A new sub-clause requires top management to develop, maintain and promote a culture of integrity at all levels; this moves from implicit to an explicit requirement.
- Anti-bribery function. The term «anti-bribery compliance function» (2016) becomes the «anti-bribery function,» with a clearer description of its responsibilities, resources and operational independence.
- Governing body and top management. Reinforced expectation of active leadership and oversight of the anti-bribery management system.
- Climate change. New sub-clauses (4.1 and 4.2) incorporating the 2024 climate action amendment, now applicable to all management system standards.
- Conflicts of interest. A more complete definition and more detailed guidance for identifying, managing and mitigating risks.
- Reordered clause 10. Now starts with «Continual improvement» (10.1), followed by «Nonconformity and corrective action» (10.2).
- Harmonization. The text was aligned with ISO 37301 (compliance), ISO 37000 (governance) and ISO/TS 37008 (internal investigations), making integrated systems easier.
Who is affected, and what should you do now?
If you are already certified to ISO 37001:2016:
- Learn about the 2025 edition changes (especially anti-bribery culture and the anti-bribery function).
- Identify gaps between your current system and the clarified requirements.
- Update your anti-bribery management system where needed.
- Schedule your transition audit before February 28, 2027, ideally within your next audit cycle.
If you are not yet certified: you can build your system directly on the current 2025 edition. Contact us for a scope review.
How we support your transition
As a conformity assessment body, our role is independent and evidence-based:
- Transition audit. We coordinate the assessment of your system against the 2025 edition requirements, in line with our current accreditation scope.
- Information on requirements and process. We explain what changes, how it is assessed and what deadlines apply.
- Training on the changes. Awareness and update programs on the 2025 edition for your team.
Impartiality note: to preserve the independence of the certification decision, we do not design or implement the anti-bribery management system that will be assessed. We explain the requirements and assess conformity; the design of the system is your organization’s responsibility.
Frequently asked questions
Has ISO 37001:2025 already been published?
Yes. It was published in February 2025 as the second edition and replaces ISO 37001:2016.
How much time do I have for the transition?
All certified sites must complete the transition before February 28, 2027. After that date, certificates under the 2016 edition are no longer valid.
Are the changes major?
No. The structure and core requirements remain the same. The changes refine and clarify, with emphasis on anti-bribery culture, leadership’s role and the anti-bribery function.
What is the most relevant thing introduced by the 2025 edition?
The explicit requirement to build and sustain an anti-bribery culture, and a clearer definition of the anti-bribery function and its operational independence.
Can it be integrated with other compliance standards?
Yes. The text was harmonized with ISO 37301, ISO 37000 and ISO/TS 37008, making integrated management systems easier when scope and program requirements allow it.
Plan your ISO 37001:2025 transition before February 2027
Get a scope review and a proposal tailored to your organization, sites and audit cycle.