Category: Ethics & Conduct

Anti-Corruption

Also known as: Anticorruption

Simply put

Anti-corruption refers to the laws, policies, controls, and practices that organizations and public bodies use to prevent, detect, and respond to corruption, which is commonly described as the abuse of entrusted or public power for private gain. It spans both government efforts to reduce corruption in society and measures within businesses to address fraud, misconduct, and other illegal activity. It is an evolving field of policy and practice rather than a single fixed rule.

Formal definition

Anti-corruption denotes the framework of laws, policies, controls, and business practices designed to prevent, detect, and respond to corruption in commercial and public settings, where corruption is frequently characterized as the abuse of public or entrusted power for private gain. In a compliance context, it typically encompasses measures aimed at reducing the incidence and harm of corrupt conduct as well as related fraud, misconduct, and abuse. The specific obligations, prohibited conduct, and enforcement mechanisms vary by jurisdiction, sector, and applicable legal regime; this definition describes the general concept and does not substitute for jurisdiction-specific legal analysis, which should be verified against the relevant primary sources.

Why it matters

Corruption, commonly described as the abuse of public or entrusted power for private gain, imposes significant harm on organizations, markets, and society. For businesses, corrupt conduct can expose the organization to legal liability, financial loss, reputational damage, and the erosion of stakeholder trust. Because anti-corruption is an evolving field of policy and practice rather than a single fixed rule, organizations typically cannot treat it as a one-time compliance exercise; expectations, enforcement priorities, and applicable legal regimes shift over time and across jurisdictions.

Effective anti-corruption measures matter because they help organizations prevent, detect, and respond to not only corruption itself but also related fraud, misconduct, and abuse. Public bodies also play a role: as noted in the evidence, actors such as state attorneys general are involved in reducing and rooting out corruption, reflecting that anti-corruption spans both governmental efforts to reduce corruption in society and internal measures within businesses. This dual character means that private-sector compliance programs often operate within a broader public enforcement landscape.

For compliance functions specifically, anti-corruption sits at the intersection of legal obligation and leading practice. Some anti-corruption requirements are binding under applicable laws, while other measures reflect voluntary standards or industry guidance. Because prohibited conduct, obligations, and enforcement mechanisms vary by jurisdiction, sector, and legal regime, organizations should verify specific requirements against the relevant primary sources and obtain professional legal advice where interpretation is required.

Who it's relevant to

Compliance officers

Compliance officers are typically responsible for designing, implementing, and maintaining the policies and controls that make up an organization's anti-corruption framework, and for ensuring these measures reflect applicable obligations, which vary by jurisdiction and sector.

General counsel and legal teams

Legal functions interpret which anti-corruption obligations are binding versus advisory in a given jurisdiction and legal regime, and address matters of legal interpretation that fall outside the scope of a general definition and require professional advice.

Internal auditors

Internal auditors help assess whether anti-corruption controls are functioning as intended to prevent and detect corruption, fraud, misconduct, and related activity, providing assurance over the design and operation of these measures.

Risk managers

Risk managers consider the potential for corrupt conduct and related fraud and misconduct as sources of uncertainty against organizational objectives, informing how anti-corruption controls are prioritized to reduce the incidence and harm of such conduct.

Public bodies and enforcement authorities

Government actors, including offices such as state attorneys general, play a role in reducing and rooting out corruption in society, forming part of the broader public enforcement landscape within which private-sector programs operate.

Inside Anti-Corruption

Anti-Bribery Controls

Measures designed to prevent the offering, giving, receiving, or soliciting of anything of value to improperly influence a decision. These often address dealings with public officials and, in many programs, private-to-private (commercial) bribery, though the precise scope of covered conduct varies by applicable law and jurisdiction.

Facilitation Payments Position

An organization's stated stance on small payments intended to expedite routine governmental actions. Treatment differs across legal regimes, some prohibit such payments outright while others recognize limited exceptions, so this is typically a jurisdiction-dependent policy element rather than a universal rule.

Gifts, Hospitality, and Entertainment Governance

Policies, thresholds, and approval or registration mechanisms governing the exchange of gifts, meals, travel, and hospitality, intended to distinguish legitimate business courtesies from improper inducements. Appropriate thresholds and controls often vary by role, counterparty, and sector.

Third-Party and Intermediary Due Diligence

Risk-based screening and ongoing monitoring of agents, distributors, consultants, joint venture partners, and other intermediaries who may act on the organization's behalf, since third parties are a frequently cited source of corruption exposure.

Conflicts of Interest Management

Processes to identify, disclose, and address situations where personal interests may improperly influence business judgment. This element frequently spans both governance and compliance pillars.

Books, Records, and Internal Accounting Controls

Requirements for accurate and complete recordkeeping and for internal accounting controls that help detect and prevent the concealment of improper payments. Certain regimes impose recordkeeping and controls obligations distinct from the anti-bribery prohibition itself.

Governance, Tone, and Oversight

Board and senior management responsibility for setting expectations, allocating resources, and overseeing the anti-corruption program, a governance dimension addressing decision rights and accountability.

Training, Awareness, and Reporting Channels

Communication, targeted training, and confidential reporting or whistleblowing mechanisms intended to build awareness and surface concerns, often with anti-retaliation protections whose specifics depend on jurisdiction.

Common questions

Answers to the questions practitioners most commonly ask about Anti-Corruption.

Is anti-corruption the same as anti-bribery?

Not exactly. Bribery is one form of corruption, but anti-corruption is broader. It typically also addresses conduct such as embezzlement, extortion, facilitation payments, conflicts of interest, and abuse of position for private gain. Anti-bribery measures are therefore usually a subset of a wider anti-corruption program. The precise scope of what counts as corruption varies by jurisdiction and by the framework or law being applied, so organizations often define terms explicitly in their own policies.

Does an anti-corruption program guarantee that an organization will not face corruption-related enforcement?

No. No program can eliminate the risk of corruption or guarantee against enforcement action. An anti-corruption program is a set of controls intended to reduce the likelihood and impact of corrupt conduct and to demonstrate a good-faith, reasonable effort to prevent it. In many enforcement contexts, the existence and effectiveness of such a program may be considered as a mitigating factor, but it does not confer immunity. Applicability and effect vary by jurisdiction, and specific legal exposure should be assessed with professional advice.

Who typically owns the anti-corruption program within an organization?

Ownership commonly spans more than one governance pillar. Boards and senior management typically set the tone and hold ultimate accountability for governance and oversight, while a compliance function often manages day-to-day design and operation of controls. Risk management may contribute to assessing corruption risk against objectives. Many organizations assign a named owner, such as a chief compliance officer or ethics officer, though structures vary by organization size, sector, and jurisdiction.

How is corruption risk usually assessed?

Corruption risk assessment typically involves identifying where the organization is exposed, often by geography, business activity, use of third parties or intermediaries, interactions with public officials, and transaction types, and evaluating the likelihood and potential impact of corrupt conduct against objectives. Assessments frequently distinguish inherent risk (before controls) from residual risk (after controls are applied). The specific methodology and rating scales differ across frameworks and organizations, and results are generally intended to inform where controls are prioritized rather than to produce a definitive score.

What controls are commonly included in an anti-corruption program?

Common control elements often include a clear policy and code of conduct, tone from the top and governance oversight, risk-based due diligence on third parties, controls around gifts, hospitality, and facilitation payments, training and communication, financial and accounting controls, whistleblowing or reporting channels, and monitoring, investigation, and remediation processes. The appropriate mix is typically risk-based and proportionate, and the specific expectations for these controls can vary depending on the applicable laws, standards, and guidance in a given jurisdiction and sector.

How can the effectiveness of an anti-corruption program be evaluated over time?

Effectiveness is often evaluated through a combination of ongoing monitoring and periodic independent review, such as internal audit. Organizations may look at indicators such as completion of risk-based due diligence, training coverage, use and handling of reporting channels, and the outcomes of investigations, alongside qualitative assessment of whether controls are operating as designed. Because no set of metrics fully captures effectiveness, evaluation typically combines quantitative and qualitative evidence and is refreshed as the risk profile changes. Expectations for review vary by framework, jurisdiction, and organization.

Common misconceptions

Anti-corruption is solely about bribing government officials.

While bribery of public officials is a core concern of many regimes, anti-corruption programs commonly also address commercial (private-to-private) bribery, conflicts of interest, gifts and hospitality, and accurate recordkeeping. The precise conduct covered depends on the applicable law and the organization's chosen program scope.

Having an anti-corruption policy guarantees compliance and eliminates legal exposure.

A policy is a control that can help modify corruption risk, but no control eliminates risk or guarantees compliance. Effectiveness typically depends on implementation, monitoring, third-party oversight, and organizational culture, and residual risk generally remains. Legal outcomes are matters requiring professional advice.

Third-party misconduct is not the organization's problem.

Intermediaries acting on an organization's behalf are a frequently cited source of corruption exposure, and many programs treat third-party due diligence and monitoring as essential precisely because responsibility can extend to conduct by agents and partners. The extent of liability varies by jurisdiction and facts.

Best practices

Adopt a risk-based approach: assess corruption exposure by geography, sector, counterparty type, and transaction, and calibrate controls accordingly rather than applying uniform measures.

Conduct proportionate, documented due diligence on intermediaries and higher-risk third parties, and refresh it through ongoing monitoring rather than one-time screening.

Set clear, role-appropriate thresholds and approval or registration processes for gifts, hospitality, and entertainment, and define the organization's position on facilitation payments in light of applicable law.

Maintain accurate books and records supported by internal accounting controls, since recordkeeping integrity is often a distinct obligation and a means of detecting concealed payments.

Provide confidential reporting channels with anti-retaliation protections and deliver targeted training to roles with elevated corruption exposure.

Establish board and senior management oversight, document tone from the top, and confirm precise legal obligations and any jurisdiction-specific requirements with qualified counsel.