- What the ISO 37001-LA Certification Actually Certifies
- Issuing Body and Certification Package
- Exam Format and Passing Score
- The Six Exam Domains
- Eligibility and Experience Requirements
- Registration, Scheduling, and Retakes
- Maintaining the Credential After You Pass
- Who Hires ISO 37001-LA Lead Auditors
- A Domain-Weighted Study Approach
- Frequently Asked Questions
- TRECCERT's ISO 37001-LA package costs EUR 519 and includes the exam, certification, digital badge, and three-year verification.
- The exam is 150 questions, 180 minutes, closed book, and requires a 60% score to pass.
- Audit Execution is the heaviest domain at 28%, more than double most other domains.
- Award requires five years general experience, two years specific experience, and 400 qualifying audit hours.
What the ISO 37001-LA Certification Actually Certifies
The Anti-Bribery Management System Lead Auditor credential (ISO 37001-LA) confirms that a professional can plan, lead, and report on audits of an organization's anti-bribery management system against the ISO 37001 standard. It is not a general compliance certificate and it is not proof of legal expertise - it is specifically an auditing qualification built around the audit lifecycle: initiation, evidence gathering, findings, and follow-up on corrective actions tied to bribery-prevention controls.
Because the acronym is shared by other credentials in the market, it's worth being precise: this article covers only the TRECCERT-issued Anti-Bribery Management System Lead Auditor certification, with its own fee structure, exam blueprint, and maintenance rules. If you're still confirming what the letters mean before diving into logistics, the companion piece on What Is ISO 37001-LA? is a useful starting point.
Issuing Body and Certification Package
TRECCERT administers the ISO 37001-LA certification. The EUR 519 certification package bundles application processing, the online examination itself, certification issuance, a digital badge, and three years of credential verification support. Training is optional under this program - self-study is explicitly permitted, so candidates who already have audit experience are not forced into a paid course before sitting the exam.
TRECCERT also sells a separate practice product for EUR 29.90 containing 70 questions with up to 10 attempts. This is a preparation tool only; it is not a substitute for or shortened version of the 150-question certification exam, and passing the practice set does not equate to passing the real assessment. If you want a full breakdown of every fee in the process, see ISO 37001-LA Certification Cost 2026: Complete Pricing Breakdown.
Exam Format and Passing Score
The ISO 37001-LA exam consists of 150 multiple-choice questions delivered in a 180-minute, closed-book format. It is offered in English and delivered through the Gauge (Test.com) platform with ProctorU Live+ remote proctoring, governed by Candidate Handbook version 2.1. A passing result requires 60% correct answers.
Closed-book, multiple-choice, and time-boxed is a meaningful combination: with 150 questions in 180 minutes, you have on average 1.2 minutes per question, which rewards candidates who can recognize ISO 37001 clause language and audit terminology quickly rather than reason from first principles under pressure. For a deeper dive into exactly what the 60% threshold means in raw numbers, read ISO 37001-LA Passing Score 2026: Exactly What You Need to Pass.
Key Takeaway
Because the exam is closed book, memorizing ISO 37001 clause structure and standard audit terminology (not just concepts) is non-negotiable - you won't have a reference copy open during the test.
The Six Exam Domains
TRECCERT's blueprint splits the exam into six domains with distinct weightings. Understanding these percentages should directly shape how you allocate study time - a topic worth 28% deserves far more attention than one worth 10%.
| Domain | Weight | Focus |
|---|---|---|
| Audit Execution | 28% | Conducting the audit, gathering evidence, interviewing |
| Auditing Fundamentals | 20% | Audit principles, roles, terminology |
| ABMS Fundamentals | 15% | Core anti-bribery management concepts |
| Audit Initiation and Preparation | 15% | Planning, scoping, audit programs |
| ABMS Requirements | 12% | ISO 37001 clause-by-clause requirements |
| Audit Reporting, Completion, and Follow-Up | 10% | Findings, reports, corrective action tracking |
Domain 5: Audit Execution (28%)
This is the largest domain by a wide margin and the one most candidates underestimate. It covers running opening meetings, collecting and evaluating audit evidence, conducting interviews, sampling techniques, and classifying nonconformities against ISO 37001 clauses.
- Distinguishing objective evidence from hearsay during interviews
- Applying sampling logic to bribery-risk controls (gifts, third-party due diligence, facilitation payments)
- Correctly grading findings as major nonconformity, minor nonconformity, or observation
Domain 3: Auditing Fundamentals (20%)
Before you can audit an ABMS, you need the vocabulary and principles common to all management system audits - independence, objectivity, audit evidence, and the roles of audit team members.
- Difference between first-party, second-party, and third-party audits
- Auditor competence and objectivity requirements
- Terminology consistent with ISO 19011 auditing guidance
Domains 1 and 2: ABMS Fundamentals and Requirements (27% combined)
These two domains together carry more weight than any single domain except Audit Execution. Domain 1 covers foundational anti-bribery management concepts; Domain 2 drills into the specific clauses of ISO 37001 - risk assessment, due diligence, financial controls, gifts and hospitality policies, and whistleblowing mechanisms.
- Mapping ISO 37001 clauses to real organizational controls
- Understanding bribery risk assessment methodology
- Knowing where due diligence obligations apply to third parties
For a complete walkthrough of every domain with sub-topics, the dedicated guide at ISO 37001-LA Exam Domains 2026: Complete Guide to All 6 Content Areas goes deeper than this overview.
Eligibility and Experience Requirements
Passing the exam is only half the requirement. TRECCERT awards the Lead Auditor credential only after verifying:
- Five years of general work experience
- Two years of specific work experience relevant to audit or anti-bribery functions
- At least 400 qualifying audit hours
- Successful application and experience verification
- Adherence to the Code of Ethics
Education can reduce the general experience requirement: a bachelor's degree waives one year, and a master's degree waives two years. This means a candidate with a master's degree could satisfy the general experience component with three years instead of five, though the two-year specific experience and 400-hour audit requirements still apply independently. Full detail on how these waivers stack and what counts as "qualifying" audit hours is covered in ISO 37001-LA Requirements 2026: Eligibility, Prerequisites & How to Qualify.
Registration, Scheduling, and Retakes
Exam purchases through TRECCERT are valid for 12 months from purchase, and you must schedule your sitting at least 72 hours in advance through the Gauge (Test.com) platform with ProctorU Live+ proctoring. This lead time matters for candidates juggling work schedules - last-minute bookings are not an option.
If you don't pass on the first attempt, the first retake requires a 90-day waiting period and costs EUR 99. That waiting window is worth planning around rather than fighting; use it to revisit weak domains identified from your first attempt, particularly Audit Execution given its 28% weight. For scheduling windows and how the 12-month validity interacts with retake timing, see ISO 37001-LA Exam Dates 2026: Testing Windows, Deadlines & Scheduling.
Maintaining the Credential After You Pass
The certification is valid for three years. To keep it active, holders must earn 90 CPE credits across the cycle, with a minimum of 30 credits earned annually - you can't front-load all 90 in year one and coast. Maintenance carries a separate cost: EUR 90 per year or EUR 240 for the full three-year cycle if paid at once, for one Lead credential.
Budget for this ongoing cost alongside the initial EUR 519 package when deciding whether the credential fits your career plan - a full cost comparison, including the practice product and retake fees, is available in the certification cost breakdown linked above.
Who Hires ISO 37001-LA Lead Auditors
Organizations pursue ISO 37001 certification to demonstrate anti-bribery controls to regulators, business partners, and public tender authorities, and they need qualified auditors - internal or contracted - to run conformity audits. Typical hiring contexts include:
- Certification bodies that need accredited or qualified auditors to conduct third-party ISO 37001 audits
- Large multinationals with compliance or internal audit functions overseeing bribery-risk controls
- Consulting firms advising clients on ISO 37001 implementation and pre-certification gap audits
- Government contractors and firms in high-corruption-risk sectors (construction, extractives, defense) needing internal ABMS audit capability
For a realistic look at role titles, hiring patterns, and how this credential factors into compensation, see ISO 37001-LA Jobs and ISO 37001-LA Salary Guide 2026: Complete Earnings Analysis.
A Domain-Weighted Study Approach
With 150 questions across six domains, the smart move is to weight your study hours to match the exam blueprint rather than spreading time evenly. Audit Execution (28%) and Auditing Fundamentals (20%) together account for nearly half the exam - they should anchor your schedule.
ABMS Fundamentals and Requirements (27% combined)
- Build a clause-by-clause map of ISO 37001 requirements
- Study bribery risk assessment and due diligence obligations
Auditing Fundamentals (20%)
- Review audit principles, roles, and independence rules
- Drill terminology likely tested in multiple-choice format
Audit Execution (28%)
- Practice classifying evidence and grading nonconformities
- Work through interview and sampling scenarios
Initiation, Preparation, Reporting, and Follow-Up (25% combined)
- Cover audit planning, scoping, and reporting workflows
- Review corrective action follow-up procedures
Full Review and Timed Practice
- Take timed practice sets to build pacing for 150 questions in 180 minutes
- Revisit any domain scoring below your target
A structured multi-week plan like this, paired with timed practice, is exactly what's detailed in ISO 37001-LA Study Guide 2026: How to Pass on Your First Attempt. You can build pacing and recall speed using the timed question sets on ISO 37001-LA Exam Prep before booking your official sitting.
Frequently Asked Questions
No. Training is optional under TRECCERT's program, and self-study is explicitly permitted. Candidates who already have sufficient audit background can prepare independently and go straight to the exam purchase.
You must wait 90 days before your first retake, and the retake costs EUR 99. Use that waiting period to focus on Audit Execution and Auditing Fundamentals, the two heaviest domains.
No. It's a 70-question practice set with up to 10 attempts, intended for preparation only. It is not the 150-question, 180-minute certification exam and should not be treated as equivalent difficulty or coverage.
Yes. A bachelor's degree waives one year of the five-year general experience requirement, and a master's degree waives two years. The two-year specific experience and 400 audit-hour requirements are unaffected by education.
Three years. To maintain it, you need 90 CPE credits across the cycle with at least 30 earned annually, plus a maintenance fee of EUR 90 per year or EUR 240 for the full cycle.