Summary of clause 4 Context

Requirements

Determine external and internal issues

Determine stakeholders

Determine requirements of stakeholders

Document the boundaries and applicability of the ABMS

Take into account external and internal issues

Take into account the requirements of stakeholders

Take into account the bribery risk assessment

Make the scope available

Establish, document, implement, maintain and improve the ABMS

Include anti-bribery specific indicators

Implement a reasonable and proportionate ABMS

Take into account the factors related to the scope of the ABMS

Undertake regular bribery risk assessment

Identify the bribery risks

Analyze and assess the bribery risks

Evaluate the adequacy and effectiveness of the controls put in place

Define criteria

Take into account the anti-bribery policy and objectives

Review the bribery risk assessment

Retain documented information of realized assessments

Risk management

Manage risks

Plan the ISMS

Establish process ownership

Scope

Bribery risk register

List of risks

Risk reduction action plan