Pecb Candidate Handbook Iso 37001 Lead Implementer MC
Pecb Candidate Handbook Iso 37001 Lead Implementer MC
LEAD IMPLEMENTER
Candidate Handbook
www.pecb.com
Table of Contents
SECTION I: INTRODUCTION ......................................................................................................................... 3
About PECB ........................................................................................................................................................... 3
The Value of PECB Certification ........................................................................................................................... 4
PECB Code of Ethics ............................................................................................................................................. 5
Introduction to ISO 37001 Lead Implementer ..................................................................................................... 6
SECTION II: EXAMINATION PREPARATION, RULES, AND POLICIES ............................................................. 7
Preparing for and scheduling the exam ............................................................................................................... 7
Competency domains ........................................................................................................................................... 8
Taking the exam .................................................................................................................................................. 17
Exam Security Policy........................................................................................................................................... 20
Exam results ........................................................................................................................................................ 21
Exam Retake Policy............................................................................................................................................. 21
SECTION III: CERTIFICATION PROCESS AND REQUIREMENTS .................................................................. 22
PECB ISO 37001 credentials .............................................................................................................................. 22
Applying for certification .................................................................................................................................... 22
Professional experience ..................................................................................................................................... 23
Professional references ..................................................................................................................................... 23
ABMS project experience ................................................................................................................................... 23
Evaluation of certification applications ............................................................................................................. 23
SECTION IV: CERTIFICATION POLICIES ..................................................................................................... 24
Denial of certification .......................................................................................................................................... 24
Certification status options ................................................................................................................................ 24
Upgrade and downgrade of credentials ............................................................................................................ 25
Renewing the certification .................................................................................................................................. 25
Closing a case ..................................................................................................................................................... 25
Complaint and Appeal Policy ............................................................................................................................. 25
SECTION V: GENERAL POLICIES ................................................................................................................ 26
Exams and certifications from other accredited certification bodies ............................................................. 26
Non-discrimination and special accommodations ........................................................................................... 26
Behavior Policy .................................................................................................................................................... 26
Refund Policy ...................................................................................................................................................... 26
About PECB
PECB is a certification body that provides education 1, certification, and certificate programs for individuals
on a wide range of disciplines.
Through our presence in more than 150 countries, we help professionals demonstrate their competence in
various areas of expertise by providing valuable evaluation, certification, and certificate programs against
internationally recognized standards.
Our mission
Provide our clients with comprehensive examination, certification, and certificate program services that
inspire trust and benefit the society as a whole.
Our vision
Become the global benchmark for the provision of professional certification services and certificate
programs.
Our values
Integrity, Professionalism, Fairness
1 Education refers to training courses developed by PECB and offered globally through our partners.
Global recognition
PECB credentials are internationally recognized and endorsed by many accreditation bodies, so
professionals who pursue them will benefit from our recognition in domestic and international markets.
The value of PECB certifications is validated by the accreditation from the International Accreditation Service
(IAS-PCB-111), the United Kingdom Accreditation Service (UKAS-No. 21923) and the Korean Accreditation
Board (KAB-PC-08) under ISO/IEC 17024 – General requirements for bodies operating certification of
persons. The value of PECB certificate programs is validated by the accreditation from the ANSI National
Accreditation Board (ANAB-Accreditation ID 1003) under ANSI/ASTM E2659-18, Standard Practice for
Certificate Programs.
PECB is an associate member of The Independent Association of Accredited Registrars (IAAR), a full
member of the International Personnel Certification Association (IPC), a signatory member of IPC MLA, and
a member of Club EBIOS, CPD Certification Service, CLUSIF, Credential Engine, and ITCC. In addition, PECB is
an approved Licensed Partner Publisher (LPP) from the Cybersecurity Maturity Model Certification
Accreditation Body (CMMC-AB) for the Cybersecurity Maturity Model Certification standard (CMMC), is
approved by Club EBIOS to offer the EBIOS Risk Manager Skills certification, and is approved by CNIL
(Commission Nationale de l'Informatique et des Libertés) to offer DPO certification. For more detailed
information, click here.
Customer-oriented service
We are a customer-oriented company and treat all our clients with value, importance, professionalism, and
honesty. PECB has a team of experts who are responsible for addressing requests, questions, and needs. We
do our best to maintain a 24-hour maximum response time without compromising the quality of the services.
The Compliance Division makes sure that PECB employees, trainers, examiners, invigilators, partners,
distributors, members of different advisory boards and committees, certified individuals, and certificate
holders (hereinafter “PECB professionals”) adhere to this Code of Ethics. In addition, the Compliance Division
consistently emphasizes the need to behave professionally and with full responsibility, competence, and
fairness in service provision with internal and external stakeholders, such as applicants, candidates, certified
individuals, certificate holders, accreditation authorities, and government authorities.
It is PECB’s belief that to achieve organizational success, it has to fully understand the clients and
stakeholders’ needs and expectations. To do this, PECB fosters a culture based on the highest levels of
integrity, professionalism, and fairness, which are also its values. These values are integral to the
organization, and have characterized the global presence and growth over the years and established the
reputation that PECB enjoys today.
PECB believes that strong ethical values are essential in having healthy and strong relationships. Therefore,
it is PECB’s primary responsibility to ensure that PECB professionals are displaying behavior that is in full
compliance with PECB principles and values.
To read the complete version of PECB’s Code of Ethics, go to Code of Ethics | PECB.
Activities undertaken as part of the anti-bribery management system (understanding the context,
establishing and implementing anti-bribery policy and procedures, assigning roles and responsibilities,
ensuring top management commitment, implementing financial and non-financial controls, correcting
nonconformities and seeking improvement opportunities) help the organization establish a culture that takes
account of social, moral, and economic consequences of bribery, while at the same time ensures that
reasonable and proportionate measures are in place to prevent, detect, and respond to bribery.
The “ISO 37001 Lead Implementer” credential is a professional certification for individuals aiming to
demonstrate the competence to implement the anti-bribery management system and lead an
implementation team.
Considering that implementing is one of the most in-demand professions, an internationally recognized
certification can help you achieve your career potential and reach your professional objectives.
PECB certifications are not a license or simply a membership. They attest the candidates’ knowledge and
skills gained through our training courses and are issued to candidates that have the required experience
and have passed the exam.
This document specifies the PECB ISO 37001 Lead Implementer certification scheme in compliance with
ISO/IEC 17024:2012. It also outlines the steps that candidates should take to obtain and maintain their
credentials. As such, it is very important to carefully read all the information included in this document
before completing and submitting your application. If you have questions or need further information after
reading it, please contact the PECB international office at [email protected].
To learn more about exams, competency domains, and knowledge statements, please refer to Section III of
this document.
For the candidates that have attended the training course via one of PECB’s partners, the application fee
covers the costs of the exam (first attempt and first retake), the application for certification, and the first
year of Annual Maintenance Fee (AMF).
2
All prices listed in this document are in US dollars.
Main objective: Ensure that the candidate is able to interpret ISO 37001 principles and concepts.
Main objective: Ensure that the candidate is able to identify and explain the requirements for an anti-bribery
management system based on ISO 37001.
Main objective: Ensure that the candidate is able to plan the implementation of the ABMS based on ISO
37001.
Main objective: Ensure that the candidate is able to implement the processes of an ABMS required for an
ISO 37001 certification.
Main objective: Ensure that the candidate is able to evaluate, monitor, and measure the performance of an
ABMS.
Main objective: Ensure that the candidate is able to provide guidance on the continual improvement of an
ABMS.
Main objective: Ensure that the candidate is able to prepare an organization for the certification against ISO
37001.
Level of understanding
(Cognitive/Taxonomy) required
implementation
Monitoring,
measurement, analysis
10 12.5 X
and evaluation of an
ABMS
Continual improvement
7 8.75 X
of an ABMS
Total 80 100%
After successfully passing the exam, candidates will be able to apply for obtaining the “PECB Certified ISO
37001 Lead Implementer” credential.
Candidates who arrive late will not be given additional time to compensate for the late arrival and may not be
allowed to sit for the exam.
Candidates are required to bring a valid identity card (a national ID card, driver’s license, or passport) and
show it to the invigilator.
If requested on the day of the exam (paper-based exams), additional time can be provided to candidates
taking the exam in a non-native language, as follows:
• 10 additional minutes for Foundation exams
• 20 additional minutes for Manager exams
• 30 additional minutes for Lead exams
For more information about online exams, go to the PECB Online Exam Guide.
This exam comprises multiple-choice questions: The multiple-choice exam can be used to evaluate
candidates’ understanding on both simple and complex concepts. It comprises both stand-alone and
scenario-based questions. Stand-alone questions stand independently within the exam and are not context-
depended, whereas scenario-based questions are context-dependent, i.e., they are developed based on a
scenario which a candidate is asked to read and is expected to provide answers to five questions related to
that scenario. When answering stand-alone and scenario-based questions, candidates will have to apply
various concepts and principles explained during the training course, analyze problems, identify and evaluate
alternatives, combine several concepts or ideas, etc.
Each multiple-choice question has three options, of which one is the correct response option (keyed
response) and two incorrect response options (distractors).
Note: PECB will progressively transition to multiple-choice exams. They will also be open book and comprise
scenario-based questions that will allow PECB to evaluate candidates’ knowledge, abilities, and skills to use
information in new situations (apply), draw connections among ideas (analyze), and justify a stand or
decision (evaluate).
For specific information about exam types, languages available, and other details, please contact
[email protected] or go to the List of PECB Exams.
2. With regard to gifts, hospitality, donations, and similar benefits, which of the following does the
standard require?
A. The organization must implement procedures prohibit the only acceptance of any type of gift,
hospitality, donation, and similar benefit
B. The organization must implement procedures to prevent the offering, provision, or acceptance of
gifts, hospitality, donations, and similar benefits in cases when these are or may be perceived as
bribery
C. The organization must prohibit the provision of gifts, hospitality, donations, and similar benefits
3. To which of the following group must the anti-bribery policy be communicated directly?
A. To everyone
B. Only to those who are under the direct control of the organization
C. To personnel and business associates who pose more than a low bribery risk
4. Can an organization assign all of the anti-bribery compliance function to persons external to the
organization?
A. Yes it can
B. Depends, only in cases where it is required by law
C. No, the anti-bribery compliance function must be assigned entirely to persons who are part of the
organization
5. Which of the following is the top management of an organization is NOT required to do:
A. Encouraging the use of reporting procedures for suspected and actual bribery
B. Conducting internal audits
C. Directing personnel to contribute to the effectiveness of the ABMS
Any disclosure of information about the content of PECB exams is a direct violation of this Policy and
PECB’s Code of Ethics. Consequently, candidates taking a PECB exam are required to sign an Exam
Confidentiality and Non-Disclosure Agreement and must comply with the following:
1. The questions and answers of the exam materials are the exclusive and confidential property of PECB.
Once candidates complete the submission of the exam to PECB, they will no longer have any access to
the original exam or a copy of it.
2. Candidates are prohibited from revealing any information regarding the questions and answers of the
exam or discuss such details with any other candidate or person.
3. Candidates are not allowed to take with themselves any materials related to the exam, out of the exam
room.
4. Candidates are not allowed to copy or attempt to make copies (whether written, photocopied, or
otherwise) of any exam materials, including, without limitation, any questions, answers, or screen
images.
5. Candidates must not participate nor promote fraudulent exam-taking activities, such as:
• Looking at another candidate’s exam material or answer sheet
• Giving or receiving any assistance from the invigilator, candidate, or anyone else
• Using unauthorized reference guides, manuals, tools, etc., including using “brain dump” sites as
they are not authorized by PECB
Once a candidate becomes aware or is already aware of the irregularities or violations of the points
mentioned above, they are responsible for complying with those, otherwise if such irregularities were to
happen, candidates will be reported directly to PECB or if they see such irregularities, they should
immediately report to PECB.
Candidates are solely responsible for understanding and complying with PECB Exam Rules and Policies,
Confidentiality and Non-Disclosure Agreement and Code of Ethics. Therefore, should a breach of one or
more rules be identified, candidates will not receive any refunds. In addition, PECB has the right to deny the
right to enter a PECB exam or to invite candidates for an exam retake if irregularities are identified during and
after the grading process, depending on the severity of the case.
Any violation of the points mentioned above will cause PECB irreparable damage for which no monetary
remedy can make up. Therefore, PECB can take the appropriate actions to remedy or prevent any
unauthorized disclosure or misuse of exam materials, including obtaining an immediate injunction.
PECB will take action against individuals that violate the rules and policies, including permanently banning
them from pursuing PECB credentials and revoking any previous ones. PECB will also pursue legal action
against individuals or organizations who infringe upon its copyrights, proprietary rights, and intellectual
property.
• The time span for the communication starts from the exam date and lasts three to eight weeks for
essay type exams and two to four weeks for multiple-choice paper-based exams.
• For online multiple-choice exams, candidates receive their results instantly.
Candidates who successfully complete the exam will be able to apply for one of the credentials of the
respective certification scheme.
For candidates who fail the exam, a list of the domains where they have performed poorly will be added to
the email to help them prepare better for a retake.
Candidates that disagree with the results may request a re-evaluation by writing to [email protected] within
30 days of receiving the results. Re-evaluation requests received after 30 days will not be processed. If
candidates do not agree with the results of the reevaluation, they have 30 days from the date they received
the reevaluated exam results to file a complaint through the PECB Ticketing System. Any complaint received
after 30 days will not be processed.
If a candidate does not pass the exam on the 1st attempt, they must wait 15 days after the initial date of the
exam for the next attempt (1st retake).
Note: Candidates who have completed the training course with one of our partners, and failed the first exam
attempt, are eligible to retake for free the exam within a 12-month period from the date the coupon code is
received (the fee paid for the training course, includes a first exam attempt and one retake). Otherwise,
retake fees apply.
For candidates that fail the exam retake, PECB recommends they attend a training course in order to be
better prepared for the exam.
To arrange exam retakes, based on exam format, candidates that have completed a training course, must
follow the steps below:
1. Online Exam: when scheduling the exam retake, use initial coupon code to waive the fee
2. Paper-Based Exam: candidates need to contact the PECB Partner/Distributor who has initially organized
the session for exam retake arrangement (date, time, place, costs).
Candidates that have not completed a training course with a partner, but sat for the online exam directly with
PECB, do not fall under this Policy. The process to schedule the exam retake is the same as for the initial
exam.
The credentials in the PECB ISO 37001 scheme have the following requirements:
PECB Certified
ISO 37001
None None
Provisional
Implementer
Two years:
PECB Certified Project activities:
PECB Certified One year of work
ISO 37001 a total of 200
ISO 37001 experience in anti-
Implementer At least hours Signing the
Lead bribery management
secondary PECB Code of
Implementer Five years:
PECB Certified education Project activities: Ethics
exam or Two years of work
ISO 37001 equivalent a total of 300
experience in anti-
Lead Implementer hours
bribery management
Ten years:
PECB Certified Project activities:
Seven years of work
ISO 37001 Senior a total of 1,000
experience in anti-
Lead Implementer hours
bribery management
To be considered valid, the implementation activities should follow best implementation and management
practices and include the following:
1. Drafting ABMS implementation plans
2. Initiating ABMS implementation projects
3. Establishing policies, processes, and procedures
4. Setting objectives at relevant levels
5. Implementing the ABMS
6. Managing, monitoring, and maintaining the ABMS
7. Identifying and acting upon continual improvement opportunities
The Certification Department validates that the candidate fulfills all the certification requirements regarding
the respective credential. The candidate will receive an email about the application status, including the
certification decision.
Following the approval of the application by the Certification Department, the candidate will be able to
download the certificate and claim the corresponding Digital Badge. For more information about
downloading the certificate, click here, and for more information about claiming the Digital Badge, click here.
Professional experience
Candidates must provide complete and correct information regarding their professional experience,
including job title(s), start and end date(s), job description(s), and more. Candidates are advised to
summarize their previous or current assignments, providing sufficient details to describe the nature of the
responsibilities for each job. More detailed information can be included in the résumé.
Professional references
For each application, two professional references are required. They must be from individuals who have
worked with the candidate in a professional environment and can validate their anti-bribery management
experience, as well as their current and previous work history. Professional references of persons who fall
under the candidate’s supervision or are their relatives are not valid.
Denial of certification
PECB can deny certification/certificate program if candidates:
• Falsify the application
• Violate the exam procedures
• Violate the PECB Code of Ethics
Candidates whose certification/certificate program has been denied can file a complaint through the
complaints and appeals procedure. For more detailed information, refer to Complaint and Appeal Policy
section.
Active
Means that your certification is in good standing and valid, and it is being maintained by fulfilling the PECB
requirements regarding the CPD and AMF.
Suspended
PECB can temporarily suspend candidates’ certification if they fail to meet the requirements. Other reasons
for suspending certification include:
• PECB receives excessive or serious complaints by interested parties (suspension will be applied until
the investigation has been completed.)
• The logos of PECB or accreditation bodies are willfully misused.
• The candidate fails to correct the misuse of a certification mark within the determined time by PECB.
• The certified individual has voluntarily requested a suspension.
• PECB deems appropriate other conditions for suspension of certification.
Revoked
PECB can revoke (that is, to withdraw) the certification if the candidate fails to satisfy its requirements. In
such cases, candidates are no longer allowed to represent themselves as PECB Certified Professionals.
Additional reasons for revoking certification can be if the candidates:
• Violate the PECB Code of Ethics
• Misrepresent and provide false information of the scope of certification
• Break any other PECB rules
• Any other reasons that PECB deems appropriate
Candidates whose certification has been revoked can file a complaint through the complaints and appeals
procedure. For more detailed information, refer to Complaint and Appeal Policy section.
Upgrade of credentials
Professionals can upgrade their credentials as soon as they can demonstrate that they fulfill the
requirements.
To apply for an upgrade, candidates need to log into their PECB account, visit the “My Certifications” tab, and
click on “Upgrade.” The upgrade application fee is $100.
Downgrade of credentials
A PECB Certification can be downgraded to a lower credential due to the following reasons:
• The AMF has not been paid.
• The CPD hours have not been submitted.
• Insufficient CPD hours have been submitted.
• Evidence on CPD hours has not been submitted upon request.
Note: PECB certified professionals who hold Lead certifications and fail to provide evidence of certification
maintenance requirements will have their credentials downgraded. The holders of Master Certifications who
fail to submit CPDs and pay AMFs will have their certifications revoked.
Closing a case
If candidates do not apply for certification within one year, their case will be closed. Even though the
certification period expires, candidates have the right to reopen their case. However, PECB will no longer be
responsible for any changes regarding the conditions, standards, policies, and candidate handbook that were
applicable before the case was closed. A candidate requesting their case to reopen must do so in writing to
[email protected] and pay the required fee.
For more information about the Complaint and Appeal Policy, click here.
To ensure equal opportunities for all qualified persons, PECB will make reasonable accommodations 3 for
candidates, when appropriate. If candidates need special accommodations because of a disability or a
specific physical condition, they should inform the partner/distributor in order for them to make proper
arrangements4. Any information that candidates provide regarding their disability/special needs will be
treated with confidentiality. To download the Candidates with Disabilities Form, click here.
Behavior Policy
PECB aims to provide top-quality, consistent, and accessible services for the benefit of its external
stakeholders: distributors, partners, trainers, invigilators, examiners, members of different committees and
advisory boards, and clients (trainees, examinees, certified individuals, and certificate holders), as well as
creating and maintaining a positive work environment which ensures safety and well-being of its staff, and
holds the dignity, respect and human rights of its staff in high regard.
The purpose of this Policy is to ensure that PECB is managing unacceptable behavior of external
stakeholders towards PECB staff in an impartial, confidential, fair, and timely manner. To read the Behavior
Policy, click here.
Refund Policy
PECB will refund your payment, if the requirements of the Refund Policy are met. To read the Refund Policy,
click here.
3 According to ADA, the term “reasonable accommodation” may include: (A) making existing facilities used by employees readily
accessible to and usable by individuals with disabilities; and (B) job restructuring, part-time or modified work schedules, reassignment
to a vacant position, acquisition or modification of equipment or devices, appropriate adjustment or modifications of examinations,
training materials or policies, the provision of qualified readers or interpreters, and other similar accommodations for individuals with
disabilities.
4 ADA Amendments Act of 2008 (P.L. 110–325) Sec. 12189. Examinations and courses. [Section 309]: Any person that offers
examinations or courses related to applications, licensing, certification, or credentialing for secondary or post-secondary education,
professional, or trade purposes shall offer such examinations or courses in a place and manner accessible to persons with disabilities
or offer alternative accessible arrangements for such individuals.
www.pecb.com
©2023 PECB