

Anti-Bribery and Corruption (ABAC) refers to the framework of policies, controls, and practices organisations adopt to prevent, detect, and address bribery or corrupt behaviour. Such misconduct typically involves offering, giving, receiving, or soliciting anything of value with the intent to improperly influence business or government decisions.
Effective ABC compliance is not just a legal safeguard—it is a cornerstone of corporate integrity. By embedding robust anti-bribery measures, organisations protect themselves from regulatory penalties, reputational damage, and operational risks. More importantly, they signal a clear commitment to ethical conduct, transparency, and accountability—values that build lasting trust with regulators, clients, partners, and the wider community.
TL;DR
Here’s the blunt truth:
This guide cuts through the theatre. Use it to tighten your controls, harden third-party gates, and generate evidence your programme is effective.


Most enforcement actions involve an intermediary. Programmes rise or fall on how third parties are approved, contracted, paid, and monitored.
Intake & Risk Rating
Capture purpose, scope, countries, public-official touchpoints, compensation model.
Weight risk by country, sector, service type, deal size, proximity to officials.
Due Diligence (depth follows risk)
Identify ultimate beneficial owners; screen for sanctions, PEPs, adverse media; verify licences and litigation.
For higher risk: references, site visits, principal interviews, delivery capacity proofs.
Decision & Controls
Independent compliance sign-off for elevated risk.
Contract controls: ABAC clauses, audit rights, subcontracting approval, termination for breach.
Payment controls: strict approval matrix, segregation of duties, “no PO/no pay”.
Onboarding
Mandatory training/attestation; distribute code of conduct; bank detail verification.
Ongoing Monitoring
Periodic rescreening, payment analytics (round numbers, split invoices, weekend payments), performance and delivery checks, renewal vetting.
Offboarding
Exit certification; records retained; lessons captured in the risk assessment.
Principle: If legitimate value cannot be clearly explained, onboarding should not proceed.
Policy shelf-ware:
Fix: Convert policy into role-based micro-rules. Use short scenario drills in manager meetings.
Procurement blind spots:
Fix: Make risk rating a system blocker; no rating = no PO.
Due diligence theatre:
Fix: Vet before commercial terms are set. Tie depth to risk. Re-screen on trigger events.
Finance as rubber stamp:
Fix: Enforce AP approvals. Trend exceptions to the CFO monthly.
Training as trivia:
Fix: Scenario-based dilemmas; mark what to do, who approves, what to record.
Investigations that stall:
Fix: Time-boxed plans; evidence maps; independent oversight; published lessons learned.
The Changing Global Landscape of ABAC Compliance
Manage Financial Compliance and Business Risk with Neotas AML Solutions.
Neotas is an Enhanced Due Diligence Platform that leverages AI to join the dots between Corporate Records, Adverse Media and Open Source Intelligence (OSINT).
🗓️ Schedule a Call or Book a Demo of Neotas Anti-money laundering (AML) Solutions.
The UKBA covers public and private bribery and includes a corporate offence for failure to prevent bribery by associated persons. The FCPA targets bribery of foreign officials and requires accurate books, records, and internal controls.
No. Certification is a structure, not a shield. Regulators test effectiveness through evidence of behaviour change and working controls.
Patterns matter. Small, frequent items during decision windows can be as risky as one lavish event.
By risk tier. High: at least annually or on trigger events (ownership change, adverse media). Medium: every 2–3 years. Low: at renewal.
A small payment to speed up a routine action. Prohibited under the UKBA and against most corporate policies. Use escalation channels instead.
Depends on facts, materiality, and jurisdictions. Where misconduct is credible, systemic, or senior-level, obtain specialist counsel and assess quickly.
Substantiated hotline cases, timely close-out, reduction in payment exceptions, improved third-party risk posture, and closure of repeat audit findings.
Neotas Enhanced Due Diligence covers 600Bn+ Archived web pages, 1.8Bn+ court records, 198M+ Corporate records, Global Social Media platforms, and more than 40,000 Media sources from over 100 countries to help you screen & manage risks.
| Cookie | Duration | Description |
|---|---|---|
| AWSALBTG | 7 days | AWS Application Load Balancer Cookie. Load Balancing Cookie: Used to encode information about the selected target group. |
| AWSALBTGCORS | 7 days | AWS Classic Load Balancer Cookie: Used to map the session to the instance. This cookie is identical to the original ELB cookie except for the attribute &SameSite=None; |
| cookielawinfo-checkbox-advertisement | 1 year | Set by the GDPR Cookie Consent plugin, this cookie is used to record the user consent for the cookies in the "Advertisement" category . |
| cookielawinfo-checkbox-analytics | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics". |
| cookielawinfo-checkbox-functional | 11 months | The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional". |
| cookielawinfo-checkbox-necessary | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary". |
| cookielawinfo-checkbox-others | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other. |
| cookielawinfo-checkbox-performance | 11 months | This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance". |
| CookieLawInfoConsent | 1 year | Records the default button state of the corresponding category & the status of CCPA. It works only in coordination with the primary cookie. |
| debug | never | Cookie used to debug code and website issues |
| shown | session | Session cookie to control number of times a pop up is shown. |
| viewed_cookie_policy | 11 months | The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not user has consented to the use of cookies. It does not store any personal data. |
| Cookie | Duration | Description |
|---|---|---|
| __cf_bm | 30 minutes | This cookie, set by Cloudflare, is used to support Cloudflare Bot Management. |
| AnalyticsSyncHistory | 1 month | Used to store information about the time a sync took place with the lms_analytics cookie |
| bcookie | 2 years | LinkedIn sets this cookie from LinkedIn share buttons and ad tags to recognize browser ID. |
| bscookie | 2 years | LinkedIn sets this cookie to store performed actions on the website. |
| lang | session | LinkedIn sets this cookie to remember a user's language setting. |
| lidc | 1 day | LinkedIn sets the lidc cookie to facilitate data center selection. |
| UserMatchHistory | 1 month | LinkedIn sets this cookie for LinkedIn Ads ID syncing. |
| Cookie | Duration | Description |
|---|---|---|
| li_gc | 2 years | Used to store consent of guests regarding the use of cookies for non-essential purposes |
| rl_anonymous_id | 1 year | Generates an unique anonymous Id to identify a user and attach to a subsequent event. |
| rl_user_id | 1 year | to store a unique user ID for the purpose of Marketing/Tracking |
| Cookie | Duration | Description |
|---|---|---|
| _ga | 2 years | The _ga cookie, installed by Google Analytics, calculates visitor, session and campaign data and also keeps track of site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognize unique visitors. |
| _gat_gtag_UA_107495977_1 | 1 minute | Set by Google to distinguish users. |
| _gat_UA-107495977-1 | 1 minute | A variation of the _gat cookie set by Google Analytics and Google Tag Manager to allow website owners to track visitor behaviour and measure site performance. The pattern element in the name contains the unique identity number of the account or website it relates to. |
| _gcl_au | 3 months | Provided by Google Tag Manager to experiment advertisement efficiency of websites using their services. |
| _gid | 1 day | Installed by Google Analytics, _gid cookie stores information on how visitors use a website, while also creating an analytics report of the website's performance. Some of the data that are collected include the number of visitors, their source, and the pages they visit anonymously. |
| attribution_user_id | 1 year | This cookie is set by Typeform for usage statistics and is used in context with the website's pop-up questionnaires and messengering. |
| CONSENT | 2 years | YouTube sets this cookie via embedded youtube-videos and registers anonymous statistical data. |
| Cookie | Duration | Description |
|---|---|---|
| _fbp | 3 months | This cookie is set by Facebook to display advertisements when either on Facebook or on a digital platform powered by Facebook advertising, after visiting the website. |
| fr | 3 months | Facebook sets this cookie to show relevant advertisements to users by tracking user behaviour across the web, on sites that have Facebook pixel or Facebook social plugin. |
| IDE | 1 year 24 days | Google DoubleClick IDE cookies are used to store information about how the user uses the website to present them with relevant ads and according to the user profile. |
| test_cookie | 15 minutes | The test_cookie is set by doubleclick.net and is used to determine if the user's browser supports cookies. |
| VISITOR_INFO1_LIVE | 5 months 27 days | A cookie set by YouTube to measure bandwidth that determines whether the user gets the new or old player interface. |
| YSC | session | YSC cookie is set by Youtube and is used to track the views of embedded videos on Youtube pages. |
| yt-remote-connected-devices | never | YouTube sets this cookie to store the video preferences of the user using embedded YouTube video. |
| yt-remote-device-id | never | YouTube sets this cookie to store the video preferences of the user using embedded YouTube video. |
| yt.innertube::nextId | never | This cookie, set by YouTube, registers a unique ID to store data on what videos from YouTube the user has seen. |
| yt.innertube::requests | never | This cookie, set by YouTube, registers a unique ID to store data on what videos from YouTube the user has seen. |