- Exam Blueprint Overview
- Domain 1: ABMS Fundamentals (15%)
- Domain 2: ABMS Requirements (12%)
- Domain 3: Auditing Fundamentals (20%)
- Domain 4: Audit Initiation and Preparation (15%)
- Domain 5: Audit Execution (28%)
- Domain 6: Audit Reporting, Completion, and Follow-Up (10%)
- Turning Domain Weighting Into a Study Plan
- Registration and Exam-Day Mechanics
- Frequently Asked Questions
- Audit Execution is the largest domain at 28% - build your entire study plan around it first.
- The exam is 150 multiple-choice questions, 180 minutes, closed book, with a 60% passing score.
- Six domains cover ABMS fundamentals through audit reporting; three are audit-process domains totaling 63% combined.
- TRECCERT's Candidate Handbook 2.1 defines the official blueprint - don't study a generic auditing outline.
Exam Blueprint Overview
Every ISO 37001-LA candidate eventually asks the same question: what exactly is on this exam, and how much time should each topic get? TRECCERT's blueprint for the Anti-Bribery Management System - Lead Auditor credential answers that with six clearly weighted domains. Together they test whether you can understand an anti-bribery management system (ABMS) built on ISO 37001, and whether you can actually audit one from planning through follow-up.
The exam itself is 150 multiple-choice questions delivered in 180 minutes, closed book, in English, via Gauge (Test.com) with ProctorU Live+ proctoring. You need 60% correct to pass. Nothing about the format rewards guessing patterns or memorized templates - the questions map directly to the six domains below, and the domain weights tell you where the bulk of those 150 questions will come from.
| Domain | Weight | Core Focus |
|---|---|---|
| 1. ABMS Fundamentals | 15% | Bribery concepts, ABMS purpose and scope |
| 2. ABMS Requirements | 12% | ISO 37001 clause-by-clause requirements |
| 3. Auditing Fundamentals | 20% | Audit principles, types, roles, terminology |
| 4. Audit Initiation and Preparation | 15% | Planning, scoping, checklist design |
| 5. Audit Execution | 28% | Conducting the audit, evidence, findings |
| 6. Audit Reporting, Completion, and Follow-Up | 10% | Reports, closing meetings, corrective action |
For a full walkthrough of what "passing" actually requires numerically, see our companion piece on the ISO 37001-LA passing score. If you're still deciding whether to pursue this credential at all, the ROI analysis is a good place to start.
Domain 1: ABMS Fundamentals (15%)
This domain establishes the conceptual foundation everything else builds on. It's not about auditing yet - it's about understanding what bribery is, why organizations adopt an anti-bribery management system, and how that system fits into broader governance and compliance frameworks.
ABMS Fundamentals
Candidates must understand core anti-bribery concepts before they can meaningfully audit against them.
- Definitions of bribery, facilitation payments, and related corruption terminology
- Purpose, scope, and intended benefits of implementing an ABMS
- How an ABMS interacts with broader compliance, risk, and governance structures
- The rationale behind third-party and business associate risk in anti-bribery contexts
Questions in this domain tend to test comprehension rather than clause memorization - you're demonstrating that you understand why the system exists, not yet how to inspect it. If terminology is where you feel weakest, our one-page cheat sheet is designed for exactly this kind of rapid-fire concept review.
Domain 2: ABMS Requirements (12%)
Domain 2 shifts from concepts to the standard itself. This is where you need working familiarity with ISO 37001's structure - the requirements an organization must satisfy to claim conformance, and the language auditors use to reference them.
ABMS Requirements
Expect questions that test whether you can identify which requirement a given scenario relates to.
- Leadership commitment, anti-bribery policy, and roles/responsibilities
- Risk assessment and due diligence requirements for the ABMS
- Controls related to gifts, hospitality, donations, and financial/non-financial controls
- Documentation and record-keeping obligations under the standard
Be sure you're studying against TRECCERT's assigned edition and blueprint of ISO 37001, as referenced in the Candidate Handbook version 2.1 - not an outline built for a different program. This distinction matters more than most candidates realize, and it's covered in more depth in our eligibility and requirements guide.
Domain 3: Auditing Fundamentals (20%)
At 20%, this is the second-largest domain and the conceptual backbone of the "Lead Auditor" half of the credential. Domains 1 and 2 tested your knowledge of the ABMS; Domain 3 tests your knowledge of auditing itself, independent of any specific standard.
Auditing Fundamentals
This domain draws heavily on generic management-system auditing principles applied to the anti-bribery context.
- Audit principles: integrity, fair presentation, due professional care, confidentiality, evidence-based approach
- Types of audits: first-party, second-party, third-party, combined, and integrated audits
- Roles: audit team leader, audit team member, technical expert, observer
- Core terminology: audit criteria, audit evidence, audit findings, nonconformity
Key Takeaway
Because Auditing Fundamentals and Audit Execution together represent 48% of the exam, mastering generic audit methodology is arguably more decisive to your score than memorizing ISO 37001 clauses alone.
Domain 4: Audit Initiation and Preparation (15%)
Before an auditor ever sets foot in a facility or opens a document review, there's a planning phase - and this domain tests whether you know how to run it correctly.
Audit Initiation and Preparation
Preparation quality determines audit quality; this domain checks your ability to set an audit up for success.
- Establishing audit objectives, scope, and criteria
- Feasibility determination and audit team selection
- Developing the audit plan and communicating it to relevant parties
- Preparing checklists and work documents aligned to the ABMS requirements being audited
Candidates who have real audit experience - even outside anti-bribery - often find this domain intuitive, because the logic mirrors initiation phases in other management-system audits. If you're weighing whether your background is enough to sit the exam, review the requirements guide for the experience thresholds TRECCERT applies.
Domain 5: Audit Execution (28%)
This is the domain that decides your exam outcome more than any other. At 28%, Audit Execution is nearly double the size of the next-largest domain and represents the practical heart of the Lead Auditor role: conducting the audit itself.
Audit Execution
Scenario-based questions here test judgment under realistic audit conditions, not rote recall.
- Conducting the opening meeting and confirming audit logistics with the auditee
- Collecting audit evidence through interviews, document review, and observation
- Evaluating evidence against audit criteria to determine conformity or nonconformity
- Generating and categorizing audit findings, including grading nonconformity severity
- Managing communication during the audit and handling unexpected obstacles or resistance
Expect the question style in this domain to lean heavily on "what should the auditor do next" scenarios rather than pure definitions. This is also where the exam differentiates candidates who have only read the standard from candidates who have actually applied audit methodology in practice. Our study guide breaks down how to practice this scenario-based reasoning specifically.
Domain 6: Audit Reporting, Completion, and Follow-Up (10%)
The smallest domain on the exam closes the audit lifecycle. It's easy to under-study because of its 10% weight, but the topics here are procedurally precise, which makes them easy to test with clean right-or-wrong questions.
Audit Reporting, Completion, and Follow-Up
This domain tests whether you know how to properly close out and document an audit.
- Preparing the audit report: content, structure, and distribution
- Conducting the closing meeting and presenting findings to the auditee
- Corrective action planning and follow-up verification
- Audit completion criteria and retention of audit records
Because the topics are narrow and rule-based, this domain often yields some of the fastest points on the exam once you've memorized the sequence: findings presented, report issued, corrective action requested, follow-up scheduled, audit closed.
Turning Domain Weighting Into a Study Plan
Once you know the weights, the sequencing question becomes straightforward: allocate study time roughly proportional to domain weight, but front-load the domains that build on each other. ABMS Fundamentals and ABMS Requirements (27% combined) give you the subject-matter vocabulary; Auditing Fundamentals, Initiation, Execution, and Reporting (73% combined) give you the process you'll actually be tested on applying.
ABMS Fundamentals + ABMS Requirements
- Build vocabulary and clause familiarity before touching audit process
- Map ISO 37001 requirement clauses to plain-language explanations
Auditing Fundamentals
- Learn audit types, roles, and evidence-based principles cold
- Practice distinguishing findings from observations
Audit Initiation and Execution
- Drill scenario questions on evidence collection and nonconformity grading
- This is your highest-weight combined block - allocate the most time here
Audit Reporting + Full Review
- Lock in the closing-meeting and follow-up sequence
- Run full-length timed practice under 180-minute conditions
If you want a deeper explanation of pacing techniques like timed drilling and spaced review applied specifically to this blueprint, see the complete study guide. For a realistic gauge of how tough the exam feels in practice, the difficulty guide and pass rate breakdown are worth reading before you finalize your timeline.
Registration and Exam-Day Mechanics
Understanding the domains is only half the picture - you also need to understand how the exam is administered so nothing catches you off guard on test day.
- The certification package costs EUR 519 and includes application processing, the online exam, certification, a digital badge, and three-year credential verification.
- Exam purchases remain valid for 12 months, and you must schedule your sitting at least 72 hours in advance.
- Delivery runs through Gauge (Test.com) with ProctorU Live+ remote proctoring, per Candidate Handbook version 2.1.
- Training is optional - self-study is explicitly permitted, which is why domain-by-domain preparation like this matters.
- If you don't pass, the first retake requires a 90-day wait and costs EUR 99.
Note that the separate EUR 29.90 practice product contains only 70 questions with 10 allowed attempts - it is a study tool, not a substitute for the 150-question, 180-minute certification exam. For exact scheduling windows and deadlines, check the exam dates guide, and for the full fee structure including maintenance costs, see the certification cost breakdown.
Once you understand the six domains and the registration mechanics together, the exam stops feeling abstract. You can practice against realistic scenario questions on our practice test platform, track your domain-by-domain accuracy, and identify exactly where your remaining study hours should go before you book your 72-hour advance slot.
Frequently Asked Questions
Start with ABMS Fundamentals and ABMS Requirements since they build the vocabulary you'll need before tackling audit process domains, then move into Auditing Fundamentals and Audit Execution, which together carry the most exam weight.
Audit Execution reflects the practical core of the Lead Auditor role - collecting evidence, evaluating conformity, and generating findings - which is why TRECCERT weights it as the largest of the six domains.
No. The EUR 29.90 practice product has 70 questions with 10 attempts allowed, while the actual certification exam has 150 multiple-choice questions delivered in 180 minutes under closed-book, proctored conditions.
No, training is optional and self-study is permitted. Many candidates prepare using the Candidate Handbook version 2.1 blueprint plus structured domain-by-domain practice.
You can retake it after a 90-day wait for a EUR 99 fee, giving you time to revisit weak domains - particularly Audit Execution and Auditing Fundamentals, which carry the most combined weight.
Ready to pass your ISO 37001-LA exam?
Put this into practice with free ISO 37001-LA questions across every exam domain.