Standards Comparison

    ISO 37001

    Voluntary
    2025

    International standard for anti-bribery management systems

    VS

    EN 1090

    Mandatory
    2009

    EU standard for steel and aluminium structural execution

    Quick Verdict

    ISO 37001 provides voluntary anti-bribery management for global organizations, mitigating corruption risks through certification. EN 1090 mandates CE marking for EU structural steel/aluminium, ensuring safety via FPC. Companies adopt ISO 37001 for ethics/trust; EN 1090 for legal market access.

    Anti-Bribery/Compliance

    ISO 37001

    ISO 37001:2025 Anti-bribery management systems

    Cost
    €€€
    Complexity
    High
    Implementation Time
    6-12 months

    Key Features

    • Risk-based anti-bribery management system framework
    • Mandatory third-party due diligence and monitoring
    • Leadership commitment and anti-bribery culture requirements
    • PDCA cycle for continuous improvement and audits
    • Internationally certifiable standard with HS structure
    Structural Metalwork

    EN 1090

    EN 1090: Execution of steel and aluminium structures

    Cost
    €€€€
    Complexity
    High
    Implementation Time
    6-12 months

    Key Features

    • Factory Production Control (FPC) certification required
    • Execution Classes (EXC1-4) for risk-based requirements
    • CE marking mandatory for EU market access
    • Welding quality management via ISO 3834 alignment
    • Full material and process traceability enforced

    Detailed Analysis

    A comprehensive look at the specific requirements, scope, and impact of each standard.

    ISO 37001 Details

    What It Is

    ISO 37001:2025 Anti-bribery management systems is an international certifiable standard for establishing, implementing, and improving an Anti-Bribery Management System (ABMS). It applies to all organization types and sizes, focusing on preventing, detecting, and responding to bribery risks through a risk-based, proportionate approach using the Harmonized Structure (HS) and PDCA cycle.

    Key Components

    • **Clauses 4-10Context, leadership, planning, support, operation, evaluation, improvement.
    • Core controls: Policy, risk assessment, due diligence, financial/non-financial controls, training, reporting.
    • **Third-party focusDue diligence, commitments from business associates.
    • Certifiable via accredited bodies with Stage 1/2 audits and surveillance.

    Why Organizations Use It

    • Mitigates legal risks (e.g., FCPA, UK Bribery Act) as evidentiary due diligence.
    • Builds stakeholder trust, reputational assurance, ESG alignment.
    • Delivers 15% compliance cost reductions, operational efficiencies.
    • Enables market access, competitive tenders.

    Implementation Overview

    Phased: Gap analysis, risk assessment, controls design, training, audits. Scalable for SMEs/multinationals; 6-12 months typical. Integrates with ISO 9001/27001; transition to 2025 by Feb 2027.

    EN 1090 Details

    What It Is

    EN 1090 is the European harmonized standard family (EN 1090-1, -2, -3) for execution and conformity assessment of steel and aluminium structural components. It implements the EU Construction Products Regulation (CPR), enabling CE marking. Primary purpose: ensure controlled fabrication, welding, inspection, and traceability for load-bearing components in construction. Key approach: risk-based scaling via Execution Classes (EXC1–EXC4).

    Key Components

    • EN 1090-1Factory Production Control (FPC)**, Declaration of Performance (DoP), AVCP systems with Notified Body certification.
    • **EN 1090-2/-3Technical rules for steel/aluminium (materials, welding per ISO 3834, tolerances, corrosion protection, NDT).
    • Core principles: traceability, qualified personnel, inspection regimes.
    • Compliance model: third-party FPC certification and ongoing surveillance.

    Why Organizations Use It

    • Mandatory CE marking for EU market access; non-compliance risks exclusion, fines.
    • Reduces defects, rework; enhances liability control.
    • Builds trust with clients, enables high-risk projects.

    Implementation Overview

    • Phased: gap analysis, FPC build, welding qualification, NB audit.
    • Applies to fabricators in construction; scales by size/EXC.
    • Requires Notified Body certification; 3–12 months typical.

    Key Differences

    Scope

    ISO 37001
    Anti-bribery management systems (ABMS)
    EN 1090
    Structural steel/aluminium execution & conformity

    Industry

    ISO 37001
    All sectors worldwide, any organization size
    EN 1090
    Construction/metal fabrication, EU/EEA market

    Nature

    ISO 37001
    Voluntary certifiable management standard
    EN 1090
    Mandatory harmonized standard for CE marking

    Testing

    ISO 37001
    Internal audits, management reviews, certification
    EN 1090
    FPC certification, surveillance audits, NDT

    Penalties

    ISO 37001
    Loss of certification, reputational damage
    EN 1090
    Market exclusion, fines, legal enforcement

    Frequently Asked Questions

    Common questions about ISO 37001 and EN 1090

    ISO 37001 FAQ

    EN 1090 FAQ

    You Might also be Interested in These Articles...

    Run Maturity Assessments with GRADUM

    Transform your compliance journey with our AI-powered assessment platform

    Assess your organization's maturity across multiple standards and regulations including ISO 27001, DORA, NIS2, NIST, GDPR, and hundreds more. Get actionable insights and track your progress with collaborative, AI-powered evaluations.

    100+ Standards & Regulations
    AI-Powered Insights
    Collaborative Assessments
    Actionable Recommendations

    Check out these other Gradum.io Standards Comparison Pages