- Confirm Which Credential This Cheat Sheet Covers
- The Exam at a Glance
- Registration, Fees and Eligibility Rules
- Your Three-Group, Eight-Subtopic Study Map
- Group 1: ABMS Establishment Requirements
- Group 2: ABMS Operation Requirements
- Group 3: ABMS Evaluation and Maintenance
- Open-Book Tactics for 50 Questions in 60 Minutes
- Validity, Renewal and What Remains Unverified
- A Study Sequence Tied to the Three Groups
- Frequently Asked Questions
- The exam is 50 multiple-choice questions in 60 minutes, open-book, online, in English, with a 60% minimum passing score.
- The fee shown on the issuer shop is EUR 179 including tax; the purchase must be used within 12 months.
- Preparation maps to three course groups and eight subtopics, which are unweighted and not official scored exam domains.
- Practitioner candidates are waived from the post-exam Certification Application and Experience Verification forms.
Confirm Which Credential This Cheat Sheet Covers
The label "ISO 37001-P" on this site refers to one credential only: the Anti-Bribery Management System - Practitioner, offered by TRECCERT. Search results for ISO 37001 are crowded with adjacent offerings, including Lead Auditor courses, Lead Implementer practice sets and Foundation-level programs from other issuers. Those are different products with different syllabi, logistics and prices. Nothing in this one-page review should be mixed with them.
If you are still orienting yourself, start with What Is ISO 37001-P? and then come back here for the compressed facts. For the broader picture of the credential itself, see ISO 37001-P Certification.
The Exam at a Glance
Everything below comes from issuer pages and the general examination rules. Memorize this table first; it anchors your pacing and planning.
| Item | Verified Fact |
|---|---|
| Governing body | TRECCERT |
| Questions | 50 (scored/unscored split not published) |
| Time allowed | 60 minutes |
| Format | Multiple-choice, one correct answer among four options |
| Passing score | 60% minimum |
| Delivery | Online, open-book, English; home/office access described |
| Fee | EUR 179, including tax, as displayed by the issuer shop |
| Scheduling | At least 72 hours ahead under the general rules |
| Purchase validity | Must be used within 12 months |
| Pass rate | No issuer cohort statistic found |
Two cautions deserve emphasis. First, 60% is a passing threshold, not a pass rate; the two are easy to confuse, and our page on the ISO 37001-P passing score explains the distinction. Second, the 16 hours and 16 CPE you may see on the training page describe the course, not the exam length. The exam itself is 60 minutes.
Registration, Fees and Eligibility Rules
What you need to register
Under the general examination rules, candidates must be 18 or older, hold valid identification, complete payment or approval, and comply with certification requirements and the ethics rules. No particular training provider or course is mandatory, and self-study is permitted. Practitioner-specific education, experience-hour and reference requirements were not established in the reviewed sources, so do not assume any exist, and do not assume they do not; verify on the issuer page before paying. For a fuller walkthrough, see ISO 37001-P Requirements.
What the Practitioner waiver does and does not cover
The current Certification Process page expressly waives Practitioner candidates from submitting the post-exam Certification Application and Experience Verification forms. That is a narrow waiver. It does not remove exam registration, identification, payment or ethics requirements.
Proctoring: what is and is not known
The Candidate Handbook v2.1 names Gauge and ProctorU in its general administration arrangements. However, a Practitioner-specific platform assignment or proctoring tier was not established. Do not rely on a blog post, forum thread or competitor page describing Professional- or Lead-level proctoring; confirm your own exam's arrangements when you schedule.
Your Three-Group, Eight-Subtopic Study Map
The retained curriculum hierarchy, in source order, is:
- ABMS Establishment Requirements: Overview of ISO 37001; Context of the Organization; Leadership; Planning; Support
- ABMS Operation Requirements: Operation
- ABMS Evaluation and Maintenance: Performance Evaluation; Improvement
That is three groups containing eight subtopics. Treat it as an unweighted preparation map. The issuer has not declared these as scored exam domains, has not published domain weights, and the sources do not establish this list as an exhaustive blueprint. So avoid claims like "Group 1 is worth the most questions." The group with the most subtopics is not necessarily the group with the most exam items. For deeper context on how these content areas fit together, see the ISO 37001-P exam domains guide.
Key Takeaway
Because weights are unpublished, distribute your study time by your own weakness rather than by a guessed percentage. Review all eight subtopics at least once before attempting any practice material.
Group 1: ABMS Establishment Requirements
This group holds five of the eight subtopics, so it is the broadest part of your map. It covers how an anti-bribery management system (ABMS) is set up before any operational control exists.
Overview of ISO 37001
Foundational vocabulary and purpose of an anti-bribery management system.
- Know the key defined terms, such as bribery, organization, top management and the notion of business associates, and be ready to distinguish them in scenario wording.
- Understand what a management system is meant to achieve: prevent, detect and respond to bribery, in proportion to the organization's risks.
- Note that the ISO standard edition is not explicitly identified in the issuer sources, so rely on concepts rather than memorizing clause numbering from a particular edition.
Context of the Organization
Understanding the organization and the environment in which bribery risk arises.
- Internal and external issues that influence bribery exposure.
- Needs and expectations of interested parties.
- Determining the scope of the ABMS.
- The anti-bribery risk assessment as a driver of everything downstream.
Leadership
Who is accountable, and how commitment is demonstrated.
- Distinct roles of the governing body and top management.
- The anti-bribery policy: what it must communicate and to whom.
- Assigning roles, responsibilities and authorities, including an anti-bribery compliance function with appropriate independence.
Planning
Turning identified risks into objectives and actions.
- Actions to address risks and opportunities.
- Setting measurable anti-bribery objectives and planning how to achieve them.
- Planning changes to the system in a controlled way.
Support
The resources and enablers that keep the system running.
- Resources, competence, awareness and training.
- Communication, internal and external.
- Documented information: creating, updating and controlling it.
A useful scenario habit: when an exam stem describes a management failure, ask which of these five subtopics the failure belongs to. A missing risk assessment points to Context. An unclear policy owner points to Leadership. Staff who never received guidance points to Support.
Group 2: ABMS Operation Requirements
This group contains a single subtopic, Operation, but do not underestimate it. It is where the management system meets real transactions, partners and employees. Because the issuer's group has only one named subtopic, expect scenario-style items to ask how controls function in practice.
Operation
Operational planning and control, and the controls that make anti-bribery policy real.
- Due diligence on projects, business associates and personnel, scaled to assessed risk.
- Financial and non-financial controls.
- Controls over gifts, hospitality, donations and similar benefits.
- Commitments from business associates, and managing inadequacy of controls.
- Raising concerns and the handling of reporting channels, and investigating and dealing with bribery.
Think in terms of cause and response: what control prevents the problem, what detects it, and what happens once it is suspected. Questions in this area often reward careful reading of qualifiers such as "most appropriate" or "first." For a sense of how demanding this style can feel, read How Hard Is the ISO 37001-P Exam?
Group 3: ABMS Evaluation and Maintenance
The final group has two subtopics and closes the plan-do-check-act loop.
Performance Evaluation
How the organization knows whether the system works.
- Monitoring, measurement, analysis and evaluation.
- Internal audit: purpose, planning and reporting.
- Management review by top management, and review by the governing body and by the compliance function.
Improvement
Correcting problems and getting better over time.
- Nonconformity and corrective action.
- Continual improvement of the suitability, adequacy and effectiveness of the system.
- Distinguishing a correction (fixing the symptom) from a corrective action (addressing the cause).
Open-Book Tactics for 50 Questions in 60 Minutes
The arithmetic is simple: 60 minutes for 50 items leaves roughly 70 seconds per question on average. Open-book access helps with recall, but it can quietly consume the clock. Treat reference material as a lookup tool for verification, not as a substitute for understanding.
- Answer the obvious items first. Anything you can resolve from understanding takes seconds; flag the rest.
- Build a tab-and-keyword index before exam day. Organize notes by the three groups so a keyword search lands you in the right subtopic fast.
- Read the qualifier, then the options. With four choices and one correct response, distractors are usually plausible-but-incomplete statements. Words like "always," "only" and "first" matter.
- Cap your lookups. If a lookup is not resolving within about a minute, choose your best answer, flag it and move on.
- Reserve a final review window for flagged items rather than re-checking confident answers.
Because the scored versus unscored allocation is not published, treat every item as if it counts.
Validity, Renewal and What Remains Unverified
The general Certification Process page and Candidate Handbook v2.1 state a three-year certification validity. That is the verified policy statement. What is not established is anything Practitioner-specific beyond it: the quantified maintenance provisions we reviewed address Professional and Lead levels, so Practitioner CPE totals, reporting applicability and maintenance charges remain unverified. Do not apply Professional or Lead figures to this credential.
| Topic | Status |
|---|---|
| Three-year certification validity (general policy) | Stated in the Certification Process page and Candidate Handbook v2.1 |
| Practitioner-specific renewal schedule | Not established |
| Practitioner-specific renewal fee | Not established |
| Practitioner CPE total | Not established; the 16 CPE on the training page describes the course |
| 12-month window | Applies to using the exam purchase, not to the certificate |
If renewal matters to your employer or your planning, confirm directly with the issuer before you commit.
A Study Sequence Tied to the Three Groups
One short plan, structured by the curriculum order rather than generic advice. Adjust the pacing to your own background; the point is the order and the reasons for it.
Establishment foundations
- Overview of ISO 37001 and Context of the Organization first, because every later topic assumes their vocabulary and risk logic.
- Write a one-page glossary of defined terms.
Leadership, Planning, Support
- Pair responsibilities with the documents and resources each requires.
- Practice naming which subtopic a described failure belongs to.
Operation
- Walk through due diligence, gifts and hospitality, financial controls and reporting-and-investigation flows end to end.
- Build your open-book index for this group.
Evaluation, maintenance and timed review
- Performance Evaluation and Improvement, then a timed pass through original knowledge questions at about 70 seconds each.
- Revisit your weakest subtopic last.
For a broader methodology, our ISO 37001-P study guide covers resources and pacing in more depth. When you are ready to test recall under realistic constraints, try the ISO 37001-P practice tests. These are independently authored knowledge-preparation materials, not actual issuer questions or an official mock examination, and they cannot guarantee a pass or demonstrate practical competence.
Key Takeaway
Count your gaps by subtopic, not by overall score. A single weak area such as Operation or Improvement can sink an otherwise strong attempt when the blueprint weights are unknown.
Frequently Asked Questions
The exam has 50 multiple-choice questions with one correct answer among four options, and you have 60 minutes. The split between scored and unscored items is not published in the reviewed credential details.
The minimum passing score is 60%. This is a threshold, not a pass rate. No issuer cohort pass-rate statistic was found, so be cautious with any pass-rate figure you see elsewhere. See ISO 37001-P Pass Rate for what is and is not known.
The credential is described as online, open-book and in English. No particular training provider or course is mandatory, and self-study is permitted. The 16 hours and 16 CPE on the training page describe that course, not an exam requirement.
No. The current Certification Process page expressly waives Practitioner candidates from the post-exam Certification Application and Experience Verification forms. Exam registration, identification, payment and ethics requirements still apply.
No credential-specific salary premium was established, so any number would be speculation. Judge relevance by what employers in compliance, risk and governance roles actually list. See ISO 37001-P Jobs and Is the ISO 37001-P Certification Worth It? for a careful discussion.