China · Certification
ISO 37001 certification in China
Achieve ISO 37001 certification in China with Sterling: 8,100+ client engagements in 60+ countries, 20+ years.
- Accredited certification
- Shanghai office team
- Effivity software included
- Academy training included
Who asks for ISO 37001 in China
Clients include
ISO 37001 certification in China at a glance
Two Chinese instruments bear on ISO 37001. Not one of them names it. So why do buyers in China keep asking for the certificate?
Commercial bribery enforcement in China now reaches both sides of the transaction. The State Administration for Market Regulation's 2026 notice on implementing the revised Anti-Unfair Competition Law tells regulators to apply the newly added provisions on the receiving party and to look past labels such as rebates, commissions and handling fees. ISO 37001 gives management a certifiable way to show that bribery risk is assessed and controlled: a policy, risk assessment, due diligence on third parties, gifts and hospitality controls, financial and commercial checks, reporting channels and investigation. China has also published GB/T 27021.9-2021, which sets competence requirements for bodies auditing and certifying anti-bribery management systems; certificates come from CNCA-approved certification bodies. Central state-owned enterprises already run compliance systems under SASAC's measures, and multinational subsidiaries face group anti-bribery policies, so many integrate ISO 37001 with ISO 37301. Sterling's Shanghai office builds the controls, trains the compliance function and prepares the evidence for audit, with Effivity and Sterling Academy included.
Who needs ISO 37001 in China, and what happens without it
In China the question rarely comes from a law. It comes from the buyer, the regulator or the partner that wants proof before it signs. These are the organisations that get asked.
- Companies exposed to commercial bribery risk in sales and procurementEnforcement of the revised Anti-Unfair Competition Law now also covers the bribe-receiving side.
- Central state-owned enterprises and their subsidiariesSASAC's compliance management measures require effective compliance systems; anti-bribery is a core risk area.
- Subsidiaries of multinationals subject to foreign anti-bribery lawsGroup policies seek certified anti-bribery controls at local level.
- Government procurement suppliersProcurement regulations bar procurement agency staff from accepting banquets, gifts or cash from purchasers or suppliers; integrity controls matter.
Not sure which of these applies to you?Answer a short set of questions and your readiness report arrives by e-mail.
Take the ISO 37001 readiness checkISO 37001 requirements in China
Strip away the vocabulary and ISO 37001 requires a company to prove six things about how it prevents, detects and responds to bribery.
In China these six sit alongside the local laws and regulations listed under drivers below; one system can evidence both. The detail is on the global hub: ISO 37001 explained →
How to get ISO 37001 certified in China
One team from the Shanghai office carries the work from scoping to certificate. Delivery from the Shanghai office, on-site across mainland China as the scope requires; remote delivery for distributed teams.
- Discovery call and scopeEntities, locations, regulators and target date, agreed before any proposal.
- Gap assessment against ISO 37001 and the Chinese requirements that apply to youControls you already run for your regulators and customers are reused, not rebuilt.
- Your system built with your team in EffivityRisks, controls, evidence, incidents and reviews in one live system the auditor can see.
- Internal audit, management review and corrective actionsYour internal auditors trained by Sterling; the evidence proven before the certification body arrives.
- Certification body stage 1 and stage 2, then surveillanceAn accredited body audits and decides. Sterling supports the audits and the three-year cycle.
- End to end, from one team
- Effivity ISO & GRC software
- Preferential Sterling Academy access, with complimentary awareness training for your people
- Internal auditor training for your audit team, as applicable to your standard
- Vulnerability assessment on ISMS engagements
The Sterling Promise: 100% on-time completion, 100% success, 8,100+ client engagements.Sterling does not certify. Certification decisions stay with independent bodies.
How long does ISO 37001 certification take in China?
There is no standard duration: it depends on your scope and on how much of the system already runs. In China these are the factors that set the timeline.
- Number of business units, sales channels and third parties in scope
- State of bribery risk assessment and due diligence
- Gifts, hospitality and donations controls already in use
- Certification body scheduling around public holidays
Sterling agrees a dated plan with you on the discovery call, once the scope is known.
How much does ISO 37001 certification cost in China?
The cost has two parts: the consulting work to build and prove the system, and the certification body’s audit fees, which are quoted separately. In China these factors move both.
- Number of entities and high-risk functions in scope
- Third-party due diligence volume
- Certification body audit fees, quoted separately from consulting
- Integration with ISO 37301 compliance management
Sterling gives one customised, all-inclusive proposal after the discovery call, never before the scope is agreed.
ISO 37001 consultants and certification bodies in China
Two different organisations are involved. A consultant helps you build the system and prove it works; an accredited certification body then audits or assesses it and decides. Keeping the two separate is what makes the result credible to buyers and regulators.
- Check that the body’s accreditation or approval covers ISO 37001 and your sector, and that its certificates can be verified online.
- Ask the consultant how the local requirements in China are mapped into the same system, so nothing runs twice.
- Ask for client references in your sector; Sterling’s client letters are available on request.
- Agree who owns the evidence and the tool after the engagement; with Sterling the system stays yours, in Effivity.
Laws and regulations that drive ISO 37001 in China (3)
| Instrument | How it treats the standard |
|---|---|
| SAMR notice on further implementing the Anti-Unfair Competition Law (国市监竞争发〔2026〕40号) | Expected in practice Directs enforcement of the commercial bribery provisions, including newly added rules on the receiving party; ISO 37001 not cited. |
| GB/T 27021.9-2021 Conformity assessment — Requirements for bodies providing audit and certification of management systems — Part 9: Competence requirements for auditing and certification of anti-bribery management systems | National standard |
| Measures for the Compliance Management of Central Enterprises (SASAC Order No. 42) | Expected in practice Compliance management system; ISO 37001 not cited. |
"Expected in practice" means the instrument asks for the outcomes ISO 37001 covers without naming a standard, and ISO 37001 is what buyers and regulators commonly accept as evidence of them.
Accreditation, audit language and remote audits in China
In China, certification may be carried out only by certification bodies approved by the Certification and Accreditation Administration (CNCA) within their approved scope. Check the body's approval and that its accreditation — by CNAS or another accreditation body within the international mutual recognition arrangements (Global ACI — Global Accreditation Cooperation Incorporated, formerly the IAF MLA) — covers ISO 37001 and your sector. No body is named here unless verified. Edition and transition details: ISO 37001 hub →
Audit language
Chinese and English audits are both available from certification bodies operating in China; agree the audit language and the certificate language at application.
Remote and on-site
Remote audit elements are at the certification body's discretion; interviews with high-risk functions are often on-site.
ISO 37001 in China: questions clients ask
Is ISO 37001 required by Chinese law?
No. The SAMR notice on implementing the Anti-Unfair Competition Law directs enforcement of the commercial bribery provisions, including new rules for the party receiving a bribe, but it does not cite ISO 37001. The law prohibits commercial bribery; the standard is a voluntary control framework. Confirm your legal duties with counsel.
Is there a Chinese standard for anti-bribery certification bodies?
Yes. GB/T 27021.9-2021 sets competence requirements for auditing and certification of anti-bribery management systems, as Part 9 of the conformity assessment series for bodies providing audit and certification of management systems. It is a national standard aimed at certification bodies, not at the companies being certified.
Can ISO 37001 be combined with ISO 37301?
Yes. Both standards share a management system structure, so one set of policies, risk assessment, internal audit and management review can serve both. Whether the certification body offers an integrated audit is at its discretion, so ask when you apply.
More on ISO 37001 for Chinese organisations
Other standards Chinese businesses ask Sterling for
Organisations in China often combine ISO 37001 with one of these, under one management system where the scopes allow.
Start with a free discovery call from the Shanghai office
A Sterling consultant goes through your entities, your regulators and your target date with you. No proposal until the scope is agreed.
Sources
- SAMR notice on further implementing the Anti-Unfair Competition Law (国市监竞争发〔2026〕40号) — gov.cn (accessed 5 Oct 2026)
- GB/T 27021.9-2021 Conformity assessment — Requirements for bodies providing audit and certification of management systems — Part 9: Competence requirements for auditing and certification of anti-bribery management systems — std.samr.gov.cn (accessed 5 Oct 2026)
- Measures for the Compliance Management of Central Enterprises (SASAC Order No. 42) — gov.cn (accessed 5 Oct 2026)
- China National Accreditation Service for Conformity Assessment (CNAS) — cnas.org.cn (accessed 5 Oct 2026)
- Certification and Accreditation Administration of the People's Republic of China (CNCA) — the State Council's certification and accreditation supervision and administration department — gov.cn (accessed 5 Oct 2026)
Talk to a consultant
Plan your certification with the Shanghai team.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
china@sterling-grc.com+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice