ISO 37001 for CIDB G7 contractors: requirements & certification

For G7 contractors, ISO 37001 has moved from nice-to-have to tender-critical. Government-linked projects increasingly require demonstrable anti-bribery management, and certification is the cleanest evidence.

What the requirement looks like in practice

• Prequalification questionnaires asking for ISO 37001 certification or an equivalent ABMS
• Contract clauses invoking Section 17A "adequate procedures" from main contractors
• Flow-down requirements to subcontractors on public infrastructure work

Construction-specific risk areas

Your risk assessment must reflect how construction actually works: site approvals and inspections, variation orders, subcontractor selection, and interactions with local authorities. A generic corporate risk register will not survive an audit, or a real incident.

Typical implementation for a G7 contractor runs four to six months: risk assessment, tender and procurement controls, due diligence on agents and subs, training for project teams, then certification audit. Timed right, the certificate lands before your next major prequalification round.