How much does ISO 37001 certification cost in the UK?

ISO 37001 (anti-bribery management systems) certification costs in the UK depend on organisation size, geographic reach, exposure to bribery risk, and how mature existing compliance controls already are. Businesses operating internationally, bidding for public contracts, or using agents and intermediaries typically face higher costs.

For most UK SMEs, external certification body fees usually fall between £4,000 and £15,000 over a three-year certification cycle, while total all-in costs (including internal time, training, due diligence, and optional consultancy) often range from £7,000 to £45,000+.

Below is a detailed breakdown to help you budget accurately.

How ISO 37001 certification costs are structured

ISO 37001 certification runs on a three-year cycle, consisting of:

• Stage 1 audit – readiness, scope, and policy review
• Stage 2 audit – full certification audit, including control testing
• Surveillance audits – usually in years 1 and 2
• Recertification audit – year 3

Costs are driven by audit time, complexity, and risk, not by the certificate itself.

1. Certification body audit fees (UK market ranges)

Audit pricing is influenced by:

• number of employees
• number of sites and countries of operation
• use of third parties, agents, or intermediaries
• sector risk (e.g. construction, defence, extractives)

Typical UK ISO 37001 audit fees (ex VAT, single site)

Organisation size	Stage 1 audit	Stage 2 audit	Annual surveillance
1–10 employees	£900–£1,300	£1,300–£1,900	£900–£1,300
11–25 employees	£1,200–£1,800	£1,900–£2,800	£1,200–£1,800
26–50 employees	£1,800–£2,600	£2,800–£4,200	£1,800–£2,600
51–100 employees	£2,600–£3,800	£4,200–£6,500	£2,600–£3,800

Typical admin / certificate issue fees:

• £150–£400 ex VAT (usually one-off)

External audit costs over a full 3-year cycle (examples)

Small UK professional services firm (1–10 staff)

• Stage 1 + Stage 2 + admin: £2,350–£3,600
• Surveillance audits (years 1 & 2): £1,800–£2,600
• Recertification (year 3): £1,300–£2,000

3-year external audit total:
£5,450–£8,200 ex VAT

25-person business using agents or subcontractors

• Initial certification: £3,600–£5,600
• Surveillance audits: £2,400–£3,600
• Recertification: £1,900–£3,200

3-year external audit total:
£7,900–£12,400 ex VAT

60-person organisation with overseas exposure

• Initial certification: £6,800–£10,900
• Surveillance audits: £5,200–£7,600
• Recertification: £3,000–£5,500

3-year external audit total:
£15,000–£24,000 ex VAT

VAT note: if VAT cannot be reclaimed, add 20% to most certification body fees.

2. Buying the ISO 37001 standard

Most organisations purchase the official standard for reference.

Indicative UK pricing:

• BS EN ISO 37001:2016 (digital, single user): £120–£170
• Printed or multi-user licences cost more

This is a minor but common upfront cost.

3. ISO 37001 implementation consultancy (optional)

ISO 37001 requires risk assessment, policy design, financial and non-financial controls, third-party due diligence, and reporting mechanisms. Many organisations use consultants to speed up implementation and reduce audit risk.

Typical UK ISO 37001 consultancy costs

• Day rates: £700–£1,500 per day
• Legal or regulatory specialists often sit at the upper end

Typical consultancy spend ranges

Organisation profile	Consultant days	Typical cost
UK-only, low risk	4–7 days	£2,800–£10,500
SME with agents or subcontractors	7–15 days	£4,900–£22,500
International / higher-risk organisation	15–30 days	£10,500–£45,000

Fixed-price UK ISO 37001 packages are commonly advertised at:

• £3,000–£6,000 (low-risk SMEs)
• £6,000–£12,000 (typical SMEs)
• £15,000+ (international or regulated operations)

4. ISO 37001 training costs

Training is not mandatory but is strongly recommended for senior management, compliance leads, and internal auditors.

Typical UK training prices

Training type	Typical cost (per delegate)
ISO 37001 awareness	£300–£500 + VAT
ISO 37001 internal auditor	£800–£1,200 + VAT
ISO 37001 lead implementer	£1,200–£1,900 + VAT

Example training budgets

• 1 internal auditor trained: £800–£1,200 + VAT
• 2 staff trained: £1,600–£2,400 + VAT

5. Internal time, controls and due diligence

Internal staff time

ISO 37001 requires ongoing involvement, including:

• bribery risk assessments
• policy rollout and communication
• third-party due diligence reviews
• incident reporting and investigations
• internal audits and management review

A conservative internal time estimate:

Role	Hours	Cost per hour	Cost
Compliance lead	70	£45	£3,150
Finance / procurement input	50	£40	£2,000
Senior management oversight	20	£70	£1,400

Internal time subtotal: £6,550

Due diligence and reporting tools

Many organisations incur additional costs for:

Area	Typical annual cost
Third-party screening tools	£500–£5,000
Whistleblowing / reporting channels	£300–£1,500
Compliance registers and tracking	£250–£1,500
External legal advice (ad hoc)	£500–£5,000

Typical annual compliance tooling spend:
£1,000–£10,000+

What increases ISO 37001 certification costs?

Costs rise when organisations:

• operate internationally or in higher-risk countries
• use agents, consultants, or intermediaries
• bid for public-sector or regulated contracts
• lack existing anti-bribery controls or documentation
• require extensive third-party due diligence

UK-only, low-risk service businesses usually sit at the lower end of cost ranges.

Realistic ISO 37001 budgets (UK examples)

Example A: small UK professional services firm (10 staff)

• External audit (3 years): £5,450–£8,200
• Consultancy: £3,000–£6,000
• Training + standard: £1,000–£1,400
• Internal time + tools: £3,500–£6,000

Estimated total:
£12,950–£21,600

Example B: 25-person business using agents

• External audit (3 years): £7,900–£12,400
• Consultancy: £5,000–£10,000
• Training (2 people): £1,600–£2,400
• Internal time + tools: £5,000–£9,000

Estimated total:
£19,500–£33,800

Example C: 60-person organisation with overseas exposure

• External audit (3 years): £15,000–£24,000
• Consultancy: £10,000–£25,000
• Training: £2,000–£3,500
• Internal time + due diligence tools: £8,000–£15,000

Estimated total:
£35,000–£67,500

Simple ISO 37001 cost calculator

External certification (3 years, ex VAT)
Stage 1 £____
Stage 2 £____
Admin £____
Surveillance Y1 £____
Surveillance Y2 £____
Recertification Y3 £____

Implementation and operation
Consultant days ____ × £____ = £____
Training ____ × £____ = £____
Internal hours ____ × £____ = £____
Due diligence / reporting tools (annual) £____

Add VAT (+20%) if not reclaimable

FAQ for ISO 37001 certification cost