Before and After What a Structured ABC Framework Changes for a 1,000-Person Indian Company
Quick answer
A structured anti-bribery framework is how a company proves "adequate procedures", the defence to the corporate offence in s.9 of India's Prevention of Corruption Act 1988 (inserted in 2018) and s.7 of the UK Bribery Act 2010. It needs a board-owned policy, risk assessment, third-party due diligence, role-based training and anonymous reporting.
Key takeaways
- A policy document alone does not show adequate procedures; documented, risk-based controls do.
- UK Bribery Act s.7 reaches any company that carries on a business, or part of a business, in the UK.
- Agents, distributors, consultants and joint venture partners should be screened before engagement.
- High-risk roles such as procurement, sales and business development need enhanced training and monitoring.
- The audit committee should receive quarterly ABC reports with risk-based metrics and remediation tracking.
It's January. Your board is asking: "What does our Anti-Bribery and Corruption framework actually do?" Your CFO wants metrics. Your audit committee wants assurance. Your compliance team has a code of conduct from 2019 and a training spreadsheet.
The answer to the board's question isn't simple, but the evidence is clear. Companies that move from a "policy document" approach to a structured Anti-Bribery and Corruption (ABC) framework see measurable shifts in risk exposure, stakeholder confidence, and regulatory readiness. For Indian companies operating globally, this shift is not optional; it's the difference between passing due diligence and failing it.
What does a typical "before" ABC programme look like?
Fragmented: an outdated code of conduct, low training completion, no third-party due diligence, no anonymous reporting and no risk-based approach.
Most 1,000-person Indian companies today operate with what we call a "compliance theater" ABC program. It exists. It's documented. But it's fragmented:
The Current State
- Code of conduct last updated 2019
- Annual online training (40% completion)
- No third-party due diligence process
- Incident reporting lacks anonymity
- No risk-based approach to markets/roles
The Real Impact
- Bribery incidents go undetected
- M&A deals stall in due diligence
- Global clients ask you to re-certify annually
- Internal audit gaps widen
- Regulatory exposure unquantified
What changes with a structured ABC framework?
Anti-bribery controls move into hiring, procurement, partner selection and high-risk markets, and their results become measurable and reportable to the audit committee.
A structured ABC framework isn't about having more policies. It's about building a system where anti-bribery and corruption controls are embedded into how you hire, procure, select partners, and operate in high-risk markets.
When companies move to a genuine, risk-based ABC framework, the shift is visible in months:
Before: 1-2 incidents reported per 1,000 employees per year (often by external parties)
After: 8-15 incidents detected internally per 1,000 employees per year (majority via anonymous hotline)
Why? Because controls exist, reporting channels are safe, and employees understand what matters.
Before: Major M&A partners flag ABC framework gaps; deals stall or pricing is discounted
After: ABC compliance framework passes external audit; acquirers move faster, no discount applied
Why? Because your controls align with UK Bribery Act "adequate procedures" and ISO 37001 standards.
Before: No systematic screening; risk lives in intermediaries, agents, and distributors
After: 100% of new third parties screened; high-risk relationships require enhanced due diligence and monitoring
Why? Because you've built the process and assigned ownership.
Before: Compliance is a "we hope nothing happens" area
After: Audit committee receives quarterly ABC compliance reports with risk-based metrics and remediation tracking
Why? Because your ABC framework is now measurable, documented, and monitored.
What does the "adequate procedures" defence mean in practice?
It means proving, with documents, that you had procedures designed to prevent people associated with your company from bribing. Section 7 of the UK Bribery Act 2010 and section 9 of India's Prevention of Corruption Act 1988 both offer this defence.
Under section 7 of the UK Bribery Act 2010, a company incorporated in the UK, or any company that carries on a business or part of a business in the UK, commits an offence if a person associated with it, such as an employee, agent or other service provider, bribes someone to obtain or retain business for it, unless it can prove "adequate procedures" were in place.
| Law | Which companies | Corporate offence | Defence |
|---|---|---|---|
| Prevention of Corruption Act 1988, s.9 (India, inserted 2018) | Commercial organisations, including foreign companies carrying on business in India | A person associated with the company gives or promises an undue advantage to a public servant to obtain or retain business; punishable with a fine | Adequate procedures, in line with government guidelines, to prevent such conduct |
| Bribery Act 2010, s.7 (UK) | UK-incorporated bodies, and any body corporate or partnership carrying on a business or part of a business in the UK | A person associated with the company bribes another person to obtain or retain business or an advantage for it | Adequate procedures designed to prevent associated persons from bribing |
A structured ABC framework builds that defense. It demonstrates to regulators that you had:
- Clear anti-bribery policies and regular training
- Risk assessment of high-risk activities, markets, and roles
- Due diligence on third parties (agents, intermediaries, distributors)
- Documented conflict of interest registers
- Anonymous, accessible reporting and investigation processes
- Proportionate remedial action when breaches are found
Without a structured framework, you have none of this documented. With one, you have evidence.
What does a structured ABC framework include?
Five components: governance, risk-based controls, third-party management, role-based training, and reporting and investigation.
It's not just training. It's:
Governance: ABC policy owned by the board; compliance officer with direct audit committee access; annual risk assessment of ABC program effectiveness.
Risk-Based Controls: High-risk roles (procurement, sales, business development) receive enhanced training and monitoring. High-risk markets (high corruption index, frequent enforcement activity) trigger additional due diligence on partners and transactions.
Third-Party Management: All agents, distributors, consultants, and joint venture partners screened before engagement. Enhanced due diligence for high-risk relationships. Ongoing monitoring and contract clauses allowing audit rights.
Training That Works: Not once-a-year checkbox training. Risk-based, role-specific, documented completion. New employee onboarding includes ABC. Refresher training for roles at risk.
Reporting and Investigation: Anonymous hotline (independent, managed by third party). Investigation process with evidence preservation. Remedial action proportionate to breach severity. Documented closure and lessons learned.
Why should Indian companies build an ABC framework now?
For Indian companies in IT services, manufacturing, exports, or engineering, this shift matters because:
M&A is active. Global buyers scrutinise ABC frameworks during due diligence. Gaps trigger negotiations, discounts, or deal failures. A structured framework accelerates closure and valuation.
Regulatory scrutiny is rising. FCPA prosecutions, UK Bribery Act enforcement, and India's own anti-corruption policies are creating institutional memory. The companies with documented, risk-based frameworks will weather scrutiny better.
Global clients demand it. Your largest clients, especially in banking, pharma, and defense, are asking for ABC compliance certifications or audit reports. They're embedding it in vendor agreements.
Cost of ignoring it is rising. FCPA fines now exceed $1 billion. UK Bribery Act penalties are unpredictable. Internal investigations after an incident are expensive and disruptive. Rebuilding stakeholder trust takes years.
What should the board ask about its ABC framework?
This January, as compliance teams plan their annual programs, the board question isn't "do we have an ABC framework?" It's "does our ABC framework work?" A structured, risk-based, documented program answers that question. A policy document from 2019 doesn't.
The shift from one to the other is measurable, buildable, and urgent. Our Anti-Bribery and Corruption course provides the documented, role-based training layer, and the anti-bribery and corruption training hub covers options for high-risk roles.
Frequently asked questions
What counts as "adequate procedures"?
Procedures designed to prevent people associated with the company from bribing. In practice that means a clear policy and regular training, risk assessment, third-party due diligence, conflict of interest registers, anonymous reporting and investigation, and proportionate remedial action, all documented.
Does the UK Bribery Act apply to an Indian company?
Section 7 applies to any body corporate, wherever incorporated, that carries on a business or part of a business in the UK. Whether an Indian company is caught depends on the nature of its UK activity, so take legal advice on your own facts.
Is there an Indian equivalent of the corporate offence?
Yes. Since 2018, section 9 of the Prevention of Corruption Act 1988 makes a commercial organisation punishable with a fine if a person associated with it bribes a public servant to obtain or retain business, with an adequate procedures defence. Under section 10, officers who consented or connived face three to seven years' imprisonment.
Which roles need enhanced anti-bribery training?
Roles with the most exposure: procurement, sales and business development, plus anyone who deals with intermediaries or high-risk markets. New joiners should get ABC training at onboarding, with refreshers for at-risk roles.
What should the audit committee receive on ABC?
Quarterly ABC compliance reports with risk-based metrics and remediation tracking, from a compliance officer who has direct access to the committee.
Sources
Ready to Move From ABC Policy to ABC Framework?
Learn how to build a structured, risk-based ABC framework aligned with UK Bribery Act, FCPA, and ISO 37001 standards.
Request Demo