Under Section 7 of the UK Bribery Act, a corporate organization faces strict liability if an employee, subsidiary, or associated agent pays a bribe to secure a business advantage. The only valid legal defense available to the organization is to prove that it had implemented Adequate Procedures designed to prevent bribery across its global footprint. [1]
┌────────────────────────────────────────────────────────┐
│ THE ADEQUATE PROCEDURES RESILIENCE MAP │
└───────────────────────────┬────────────────────────────┘
▼
┌────────────────────────────────────────────────────────┐
│ 1. PROPORTIONATE PROCEDURES ──► Tailored to operations│
│ 2. TOP-LEVEL COMMITMENT ──► Board governance logs │
│ 3. RISK ASSESSMENT MATRIX ──► FRAM country analysis │
│ 4. DUE DILIGENCE PIPELINE ──► Vendor control check │
│ 5. COMMUNICATION & TRAINING ──► Continuous CPE tracks │
│ 6. MONITORING & REVIEW ──► Independent QA audits │
└────────────────────────────────────────────────────────┘
The six principles provide a framework for establishing an effective anti-corruption architecture: [1]
- 1. Proportionate Procedures: The organization’s anti-bribery controls must be tailored to match the specific operational risks, geographic footprint, and scale of its business activities.
- 2. Top-Level Commitment: Senior executives must demonstrate active involvement in anti-bribery governance, issuing clear non-compliance warnings and reviewing corruption risk reports.
- 3. Risk Assessment Matrix: The firm must evaluate its corruption exposures systematically, analyzing country-specific risk indexes, industry sectors, and transaction values inside the central register.
- 4. Due Diligence Pipeline: Performing background screening and control reviews on third-party intermediaries before contract execution.
- 5. Communication and Training: Ensuring anti-bribery policies are shared with employees and embedded into continuous training tracks across all operating layers.
- 6. Monitoring and Review: Conducting periodic internal audits and independent assessments to verify that controls function reliably across regional business operations. [1, 2, 3, 4]