hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
SterlingInternational Consulting Talk to a consultantTalk to us

Indonesia · Medan · Certification

ISO 37001 certification in Medan

Achieve ISO 37001 certification in Medan with Sterling: 8,100+ client engagements in 60+ countries, 20+ years.

  • Accredited certification
  • Jakarta office team
  • Effivity software included
  • Academy training included

Clients include

  • Allianz
  • Emirates Flight Catering
  • Etihad Rail
  • Haier
  • Whirlpool
  • Emerson
In short

ISO 37001 certification in Medan at a glance

Where a business needs many permits and many intermediaries, bribery risk sits close to daily operations. In Medan, port and logistics contractors move cargo through terminals, customs and agents, and licence applicants deal with provincial officials through the one-stop service. ISO 37001 sets the requirements for an anti-bribery management system: leadership and a policy, a bribery risk assessment, due diligence on personnel and business associates, financial and non-financial controls, gifts and hospitality rules, reporting channels, investigation, audit and review. It reduces risk and supports a defence, but does not guarantee that bribery never happens. Sterling serves Medan from its Jakarta office, tailors controls to your real exposure, and prepares the audit by an accredited certification body.

Why here

Why ISO 37001 in Medan

  • Port and terminal contractors dealing with permits, customs and agentsLogistics firms work with many intermediaries where improper payments create risk.
  • Firms seeking licences through the provincial one-stop serviceInvestors and licence applicants deal with officials, so anti-bribery controls help protect staff.

Not sure it applies to you?Answer a short set of questions and your readiness report arrives by e-mail.

Take the ISO 37001 readiness check
Local drivers

What drives ISO 37001 in Medan

Demand is buyer-led: a multinational customer, lender or tender asks for anti-bribery management evidence; the national anti-corruption law is on the country page.

Requirements

What ISO 37001 requires

Strip away the vocabulary and ISO 37001 requires a company to prove six things about how it prevents, detects and responds to bribery.

Leadership says no to briberyTop management and the governing body set an anti-bribery policy and show visible, consistent commitment to it.
Someone independent oversees complianceAn anti-bribery compliance function has the authority and independence to oversee the system.
You assessed your bribery risksBribery risks across activities, locations, business partners and transactions are assessed and kept up to date.
People and partners are checkedDue diligence covers relevant staff, business partners and projects, with controls on gifts, hospitality and donations.
Financial and other controls workFinancial and non-financial controls make it hard to pay or receive a bribe without it being noticed.
Concerns can be raised and investigatedStaff can report concerns in confidence without retaliation, and suspected bribery is investigated and acted on.

The detail is on the global hub: ISO 37001 explained →

How Sterling delivers

How Sterling delivers ISO 37001 in Medan

Served from Sterling's Jakarta office; Sterling can run bribery risk assessments with Medan management teams. One team carries the work from scoping to certificate.

Included in every engagement
  • End to end, from one team
  • Effivity ISO & GRC software
  • Preferential Sterling Academy access, with complimentary awareness training for your people
  • Internal auditor training for your audit team, as applicable to your standard
  • Vulnerability assessment on ISMS engagements

The Sterling Promise: 100% on-time completion, 100% success, 8,100+ client engagements.Sterling does not certify. Certification decisions stay with independent bodies.

Law and accreditation

Regulations and accreditation for ISO 37001 in Indonesia

The laws, regulators and accreditation route for ISO 37001 apply across Indonesia, Medan included. They are set out on the country page: ISO 37001 certification in Indonesia →

Related

Standards Medan organisations combine with ISO 37001

All standards Sterling delivers in Medan →

ISO 37001 in Medan: questions clients ask

Which Medan activities carry the highest bribery risk?

Dealings with officials for permits, inspections and customs, payments to agents and intermediaries, gifts and hospitality, and procurement. A risk assessment ranks these by exposure, value and location so that controls, approvals and training can focus where they matter most.

What does due diligence on an agent involve?

Checking the agent's identity, ownership, reputation and relationships with officials, defining the service in writing, paying only against evidence and by traceable means, and reviewing performance. The depth should match the risk of the role, and the records must show the checks were done before engagement, then repeated at renewal.

Read more

More on ISO 37001

Next step

Start with a free discovery call

A Sterling consultant goes through your sites, your customers' requirements and your target date with you. No proposal until the scope is agreed.

Sources

  1. Port logistics, container terminals and the Kuala Tanjung hub — pelindo.co.id (accessed 8 Oct 2026)
  2. DPMPTSP Provinsi Sumatera Utara (provincial investment and one-stop office, Medan) — dpmptsp.sumutprov.go.id (accessed 8 Oct 2026)

Talk to a consultant

Plan your certification with the Jakarta team.

Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.

indonesia@sterling-grc.com

+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page

What would you like to achieve?

Choose a starting point. The enquiry form takes about a minute.

Your goal
Book my free discovery call

Continue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice