What it means
An anti-bribery policy explains what conduct the organisation prohibits and what staff should do when a request feels improper, and it should cover both giving and receiving benefits. Bribery risk can arise in public tenders, licensing, sales, procurement and recruitment, so a clear rule helps a worker resist pressure and seek advice before money or a favour changes hands.
A bribe need not be a cash envelope, since gifts, travel, charitable donations, jobs for relatives or unusually large commissions can be used to influence decisions. The context matters: timing, recipient, value and business purpose, so a modest working lunch can be legitimate while a costly holiday during a tender deserves scrutiny.
The policy should define approval thresholds and a register for gifts and hospitality, but it should not assume that anything below a monetary limit is safe. Some roles and public officials have stricter rules and relevant laws differ by place, so staff should be able to ask compliance for a decision before making an offer.
Third parties create real exposure, because a consultant, distributor or customs agent may act for the organisation. Due diligence should examine ownership, reputation, capability, payment terms and the reason for the fee, and a contract should contain appropriate commitments and audit or termination rights, with screening proportionate to risk rather than one identical form for every supplier.
ISO 37001:2025 describes requirements and guidance for an anti-bribery management system, and the OECD's anti-bribery recommendation and good-practice guidance also address internal controls, ethics and compliance, which supports an approach in which policy is one component, since certification or a signed code does not guarantee that misconduct cannot occur. Senior leaders should visibly follow the rules, because if a manager waves through an unexplained intermediary fee to close a deal, staff learn that targets matter more than the written policy.
Assign a responsible function with enough independence to question senior decisions, and keep approvals and exceptions in a traceable record. Training should use examples from the business's actual work, as a purchasing team may face supplier gifts while sales staff may face pressure from a tender official, and staff need to know whom to contact, how to refuse a demand and what to record, since a quiz completed once a year is not a substitute for advice on a live issue.
A reporting channel should let workers raise concerns without retaliation, with confidentiality limits and the process for triage and investigation explained, and with allegations recorded, evidence preserved and the person complained about separated from the decision where possible, though absolute anonymity should not be promised if the system cannot provide it. Finance controls can flag unusual payments, such as round-sum invoices, vague "consulting" descriptions, high commissions, payments to unrelated accounts or missing proof of service, but these are prompts to investigate, not proof of guilt, so review the contract and actual work before approving or rejecting a payment.
Facilitation payments deserve specific treatment, because their legality and enforcement vary across jurisdictions, a payment demanded under threat raises a different safety problem from a routine convenience payment, and staff should have a safe escalation route and legal advice when necessary. Monitor effectiveness through meaningful evidence such as due-diligence completion, gifts approved or rejected, investigation time and corrective actions, remembering that a low number of reports can signal either low risk or lack of trust in the channel.
When a concern is substantiated, respond proportionately and examine the control failure, because the aim is to stop harm and prevent recurrence, and the answer may include discipline, contract changes, training, recovery or legal reporting, with records preserved and legal advice taken rather than deleting a suspicious invoice to make the ledger look clean. An anti-bribery policy works when people can use it under commercial pressure, so define prohibited conduct, approvals, third-party checks and reporting routes, then test whether leaders, finance and staff follow those steps in real transactions, with legal review for operations across multiple countries, especially where public officials or intermediaries are involved.
In practice
Real-world examples.
Example
Staff complete annual anti-bribery training. A distributor with 200 employees runs scenario-based sessions, and 180 complete them by the deadline, which is 90%. Compliance follows up with the remaining 20 within 30 days and records the reasons for any delay.
Example
Agents are checked before appointment. A construction firm reviews the ownership, references and fee rationale of a customs agent before signing a contract. The check shows that the agent's owner is a relative of a local official, so the firm escalates the decision to compliance and adds audit rights before proceeding.
Example
A suspicious payment request is reported. An accounts payable clerk receives an invoice for a round $50,000 consulting fee with no description of deliverables and reports it through the confidential channel. Payment is held while compliance reviews the contract and asks the consultant to document the work done.
Formula
Calculation
Training completion = Staff trained / Staff required to train x 100
Worked example. 180 of 200 trained.
- Completion: 180 / 200 x 100 = 90%
A second control measure is third-party screening coverage = intermediaries screened / active intermediaries x 100. If 45 of 50 active agents and distributors have completed due diligence, coverage is 45 / 50 x 100 = 90%, and the 5 unscreened intermediaries are the priority for review before any further payment is approved.Case study
Seen in the real world.
This illustrative and entirely fictional case follows Cedar Medical Supply, an invented distributor entering a new market. It screens an intermediary, defines a modest gift-approval process and gives sales staff a confidential route to report pressure for improper payments. Management investigates an unusual commission before release. The case does not claim a particular jurisdiction's legal outcome.
In this illustrative scenario, the intermediary asked for a commission of 18% on a $400,000 contract, which is $72,000, while Cedar's other distributors earned 6%, which would be $24,000. The finance team held payment until the intermediary documented the services it provided. Cedar's compliance lead recorded the review, the evidence requested and the final decision in the approvals file. The fictional board used the episode to add a rule that any commission above the standard rate needs written approval from compliance before the contract is signed.
Watch out
Common mistakes.
- Declaring "zero tolerance" without training, reporting channels or investigation procedures.
- Treating every agent or distributor as outside the policy's scope.
- Assuming a small gift or facilitation payment is always lawful without checking local law and context.
Questions
People also ask.
What is an anti-bribery policy?
Written rules and controls to prevent improper advantages offered or received.
Who does it cover?
Staff and relevant agents, intermediaries and business partners within the policy scope.
What supports it?
An approved internal or independent reporting channel with anti-retaliation safeguards.
From the founder's library
Take it further with the book.
Build your financial confidence beyond this definition. Shihan's full-length guide, Accounting Fundamentals, takes the same plain-English approach and turns it into a complete, practical playbook for non-finance managers, business owners and students - with chapter-end quiz answers and presentation slides included.
25% off with code MMHQ25, applied at checkout. Priced in USD - checkout may show the equivalent in your local currency.
View the book and save 25%