Assessing the ISO 37001 anti-bribery management system as a defence under section 17A of the Malaysian Anti-Corruption Commission Act 2009

Abstract

Section 17A of the Malaysian Anti-Corruption Commission Act 2009 introduced corporate liability for commercial organisations and imposed a legal burden on them to prove they had "adequate procedures" in place to defend against prosecution. In response, the ISO 37001:2016 Anti-Bribery Management System (ABMS) has emerged as a global standard to enhance governance and mitigate bribery risk. This paper assesses whether ISO 37001 certification can serve as a viable defence of adequate procedures under Section 17A. Employing a doctrinal qualitative approach, the study analyses statutory provisions, the Ministerial Guidelines on Adequate Procedures, and judicial developments in the United Kingdom and the United States, given the lack of Malaysian case law. The findings indicate that while ISO 37001 aligns closely with the T.R.U.S.T. principles published by the Prime Minister's Department, certification alone is unlikely to satisfy judicial scrutiny. The paper concludes that although ISO 37001 provides a solid foundation for corporate compliance, it must be supported by a strong organisational culture, active leadership commitment, and ongoing monitoring to meet the legal threshold of Section 17A. Ultimately, organisations must go beyond formal paper compliance by embedding an ethical, anti-corruption culture, effective internal controls, and continuous risk assessments. Furthermore, as the enforcement of Section 17A since 2020 has yielded very few reported cases, its long-term effectiveness in combating corporate corruption remains an area for ongoing legal observation.