PART 4 - ANTI BRIBERY MANAGEMENT SYSTEM (ISO 37000) - by Nik Zafri

 (Anti-Bribery Management System/ABMS = ISO 37001:2016)

2.0 LEADERSHIP

Leadership is not limited only to the executive and top management, but it should also include the Head of Departments, Supervisors, Immediate Superiors, Administrative positions and equivalent.

All levels of leadership must have a sense of strong commitment to uphold the requirements of Anti-Bribery Management System (ABMS)

Governing body

The standard mentions the phrase "governing body". In this context, it refers to a special committee formed by the organization. To ensure impartiality, it is recommended that this special committee should function as independent commission with minimal intervention by the executive and top management. The  committee should comprise of nominated member(s) of the Board of Directors (BOD), external civil servant from the authorities such as Anti Corruption Agency  or Institute of Governance or equivalent, legal practitioner, Auditor (both internal and external) Management Representative etc.

The duties and responsibilities of the "governing body" is to approve the ABMS policy and ensuring its' consistency with other organizational policies, plans, manual, procedures etc., review and approve report on ABMS status after a certain cut-off period. Resources; as far as is practicable; such as laptops, online/communication and network facilities, work station etc are to be provided to facilitate their work such as risk assessments, recommendations on the type of documented information required, protection of whistleblowers etc.

Cooperation and Effective Communication taking into account transparency are to be taken seriously into account. 

In the absence of a governing body (which is not recommended to minimize partiality), the top management shall assume the duties of the body.

Policy

A policy should be made to address the seriousness of bribery, compliance to the anti-bribery laws, setting/reviewing/achieving ABMS (measurable) objectives  (department/unit), whistleblowing protection and commitment to provide resources/review/continual improvement of the policy. 

As other certification standards requirement, the policy to be available at all times (usually also included in the ABMS Manual) - including stakeholders,  communicated (and translated if necessary where the English or native language shall prevail in case of ambiguity) and/or displayed.

Roles, Responsibilities and Authorities

Top management shall be responsible to implement and comply with ABMS. Thus, responsibilities and authorities (usually by means of Job Description) and ABMS 

Objectives to be assigned and communicated throughout the organization. If there is a governing body, they are to adopt a check and balance approach with the top management.

Anti-Bribery Compliance Function

a) Design/Implementation of ABMS, 

b) Advice/counsel/guide to personnel involved in ABMS,

c) To comply to the ABMS requirements

d) Reporting ABMS performance to the governing body

All 3 significant parts of the organization namely governing body, top management and the leadership function shall have the necessary competence (by means of training if necessary), status, authority and independence. (These are also rules to good governance practice)

Access to to be made to the governing body/top management should there be any concerns raised (red and yellow flags/alert) on evidence, suspicion, investigation or issues on the ABMS itself.

Delegated Decision-Making

Delegation of authority is also linked to the Job Description. The governing body, top management and the personnel involved should be aware of their respective authorities. There should be a set of controls to address decision process and authority level of decision making. Decision making should take into account the possibility of conflict of interest, impartiality and independence. Again the role of independent governing body is important to ensure the "check and balance" process running smoothly

SCAMMERS STRIKE AGAIN

 

FINALLY, THE END TO OUR MISERY IS NEAR - BROUGHT TO YOU BY TWITTER AND TWITTER BLUE

 

MENU RAHMAH - PRAKTIKAL - Cadangan dari saya sebagai rakyat - Nik Zafri

Alhamdulillah, usaha Datuk Seri Haji Salahuddin bin Ayub dan Datuk Ameer Ali Mydeen dan semua pihak yang terlibat. Pada saya restoran dan kafe yang terlibat dalam usaha menu Rahmah ni perlu mendapat pujian. YB Menteri sangat 'humble' sentiasa menyebut ''usaha kecil'' walaupun pada rakyat, ini adalah usaha yang sangat besar. Dalam tempoh jangkapanjang, pembaziran makanan juga akan dapat dielakkan. 

Cuma kena cari jalan seperti mengenalpasti mereka di kalangan B40 - kerajaan banyak sumber pangkalan data golongan B40  - sememangnya sepatutnya golongan B40 yang diberikan keutamaan tetapi mungkin kerana golongan yang mampu atau bergaji juga sedang mengalami masalah pasca PKP, mereka juga boleh dilibatkan - namun saya kurang setuju dengan membuka Menu Rahmah kepada semua golongan kerana; dengan izin; "it will defeat the purpose of making this honourable mission on the first place"

Kerajaan sudahpun ada kad khas untuk B40 tidak kira samada peringkat negeri atau kebangsaan.   Jika mereka tunjukkan kad berkenaan, maka mereka layak untuk mendapatkan menu Rahmah dengan harga yang minima.

Cuma saya terfikir, bagaimana dengan golongan yang tidak berduit, tidak berpendapatan?

Di masa-masa hadapan, kita perlu mencontohi US, yang mengadakan :

a) Supplemental Nutrition Assistance Program (SNAP) (Food Stamp)

b) Ration Stamp - semasa keadaan darurat yang membolehkan golongan ini mengambil makanan di food bank,

c) Food Coupon

Inisiatif US ini sebenarnya juga menumpukan kepada mereka yang tidak ada rumah (homeless) dan golongan miskin tegar yang tidak mempunyai pendapatan.

Banyak pertanyaan dari golongan B40 (termasuk warga emas) bagi mereka yang mungkin dalam kesulitan atau uzur tidak dapat ke restoran atau gerai yang terlibat dalam menu Rahmah. Rasanya, kena ada juga usaha untuk menghantar kepada mereka yang telah dimulakan oleh pihak Datuk Ameer Ali Mydeen. Rasanya NGO juga telah memainkan peranan mereka. Cuma bantuan juga diperlukan untuk NGO bagi menjalankan tugas yang mulia ini.

Bagi sektor korporat yang menjalankan apa yang dipanggil "(Corporate) Social Responsibility (CSR)" ini, kerajaan seperti Kementerian Dalam Negeri boleh memberikan konsep penarafan kepada mereka untuk menaikkan imej mereka. Selain itu, restoran makanan segera yang telah lama terlibat dalam CSR ini juga dapat memberikan kerjasama. 

Untuk pelajar IPTA/IPTS, sesetengah dari mereka sudah lama memulakan konsep "Pay It Forward" hasil inisiatif pensyarah-pensyarah dan pengurusan universiti yang juga melibatkan siswa-siswi yang berkemampuan. Konsep "Pay it Forward" juga boleh dilakukan di pasaraya-pasaraya selain menggunakan aplikasi khusus untuk B40 group. (samalah halnya di kantin sekolah-sekolah cuma boleh dipergiatkan lagi)

Sebenarnya peniaga gerai kecil-kecilan jalanan sememangnya dah lama menyediakan menu di bawah RM5.00 contohnya "nasi bajet" (saya ambil sampel Taman Sri Gombak, Prima Sri Gombak dan Pinggiran Batu Caves sebagai contoh) - cuma usaha mereka kadang-kadang terhalang kerana kesukaran prosedur yang ditetapkan oleh Majlis Perbandaran.  Ini perlukan kerjasama ikhlas dari Kementerian Perumahan/Kerajaan Tempatan.

Jika menu ini mahu diketengahkan kepada peniaga gerai, mungkin YB Menteri dan orang ramai boleh membantu mereka dari segi modal dan memastikan mereka mendapat sedikit keuntungan. Ini memerlukan promosi besar-besaran supaya peniaga gerai mendapat pelanggan.

Seperkara lagi, biar ada kategori yang melayakkan golongan sasaran sahaja yang akan dapat menikmati Menu Rahmah ini. Golongan-golongan lain seperti asnaf dan ibnu sabil seperti golongan miskin, anak yatim, ibu tunggal dll mungkin NGO dan mungkin Lembaga Zakat dapat memainkan peranan yang lebih besar termasuk Kementerian yang berkaitan dapat membantu. Sebab nanti jadi kelam kabut sedikit, sasaran asal adalah golongan B40.

Kaedah-kaedah yang saya tuliskan di atas adalah untuk benar-benar berlaku adil kepada golongan yang memerlukan. (saya beri contoh, semasa PKP berjalan, saya tidak membeli beras 1kg yang dijual di 99 Speedmart kerana saya tahu, ada golongan yang lebih memerlukan kerana harganya murah, samalah juga dengan minyak paket)

Saya lihat Eliew Smart (Ebit Liew) telah memulakan usaha yang terpuji iaitu adalah food bank di hadapan setiap mini-market mereka. Jika semua mini-market dapat melakukan sedemikian, rasanya masalah ini akan dapat dikurangkan. Cuma kawalan diperlukan untuk kaedah-kaedah seperti ini kerana telah banyak laporan kecurian makanan di food bank atau membolot kesemua makanan bantuan tanpa menghiraukan orang lain.

PART 3 - ANTI-BRIBERY MANAGEMENT SYSTEM - by Nik Zafri

1. Context of the Organization

Most of the contents are almost similar to any other quality, safety and environmental certification standards. With exceptional the use of "Anti Bribery Management System (ABMS)" in lieu of QMS, OHSMS and EMS.

It's important to identify and customize ABMS to the overall business nature of the organization be it internal or external. Not everything may apply to the organization practicing ABMS but to link most of the elements to the core processes would be an added advantage. 

Most important, all activities and relevant documented information to also take into account applicable statutory, regulatory, contractual and professional obligations and duties. 

2. Stakeholders

In this sense, not limited to the following, stakeholders could be :

a) Board of Directors (BOD) or equivalent - in this sense, directors that possess a certain portion of shares and with executive authorities to execute their duties and responsibilities to ensure that resources are provided to ensure the success of ABMS. They must also have a fair knowledge of the relevant regulations and ABMS.

b) Management Representative (MR) - although most of the latest revision of the standards may have ommitted "MR", it's still required to have one either a member of the BOD or a member of the organization who possess sufficient experience, qualifications and competency to become the "watchdog" of the system. 

c) Non-Executive Directors or equivalent - this would apply to advisors; despite limited to making recommendations; they should also be fully aware of applicable regulations and ABMS

d) Representatives from Service Providers - namely Consultants, Contractors and Suppliers/Vendors - they are also involved in ABMS and is bound to ethics and requirements of the ABMS procurement contract and procedures, 

e) Investors - for public and public listed companies, the prospectus, annual reports or magazines (online and offline) or press conferences should highlight the initiatives taken by the organization and how investors can play their roles in ABMS,

e) Representatives from the general public or people from the surrounding areas of operation. It's also a good practice to involve relevant NGOs as well.

f) Authorities - involving Anti-Corruption Commission, Corporate Governance, Company Laws, Security Commission, Anti-Money Laundering, Central Bank and the finances and banks as well. Communications should be well-established with these entities.

It is important to note that "whistleblowers" MUST be protected at all times.

3. Scope

"Scope" is relevant to the nature of business of the organization taking into account internal and external issues and risk assessment. Documented information to determine and clarify the scope should be included in the ABMS Manual of the Organization.

4. Anti-Bribery Management System (ABMS)

Again, the keywords :

i)  Establish

ii) Document

iii) Implement

iv) Maintain

v)  Review

vi) Improve

are included in ABMS to manage documented information (document, data and records) just like any other certification standards.

Most important - whether it's a Policy, or Manual or Plan, or Procedures (Administrative and Operation) or Work Instruction or Method Statement or Inspection and Test Plan (even checklists) - a clear and thorough process flow (typical 4 columns - no., process, person in charge (PIC) and relevant documented information - should be included and related to the documented information. These documented information should take into account ABMS standard, relevant regulations and where applicable contractual requirements.

The documented information should also contain measures designed to identify and evaluate the risk of, and to prevent, detect and respond to, bribery.

Despite to eliminate risk of bribery is almost impossible, it is advisable to have a target set for every cut-off period of implementation.

5. Risk Assessment 

a) Identify the bribery risks - proactively if necessary (based on past experience) or as per recommendation from external party,

b) New and unexpected risks could be identified as the implementation goes - analyze (data analysis), assess and prioritize (e.g. the typical Red, Yellow, Green coloured bands - with justifications)

c) Identify proactive mitigation or new mitigation for unexpected risks found during assessment,

d) Be reviewed (usually in the Management Review Meeting)

e) Be susceptible to change in the country laws/legislations or the standard or any other guidelines from the relevant parties.

Should there be a repetitive trends, then it is important to look back at the risks been identified during the commencement of the system (ABMS)

PART 2 - ANTI-BRIBERY MANAGEMENT SYSTEM - by Nik Zafri

Note : For all parters of my articles, I will not touch clause 2.0 and 3.0. The articles may follow the sequential order of the standard clauses or quoting certain paras/phrase from the standard but the contents are mostly self-explanation based on my understanding and experience. The contents may also be customized to the Malaysian environment with some references cited from international laws and case studies.

Scope

All documented information is recommended to use anti-bribery laws and voluntary commitments as their guidelines.

Among others, ISO 37001:2016 entails the need for detect, prevent and respond to many types of bribery. The scope involves personnel, associates, business activities, 3rd parties from public, private and not-for-profit sectors (example NGO). 

This means that it's not limited only to clients but also branching out to customers, JV, JV partners, consortium partners, outsourcing providers, contractors, consultants, sub-contractors, suppliers, vendors, advisors, agents, distributors, representatives, intermediaries and investors.

For public official, the system should also cover person holding a legislative, administrative or judicial office, whether by appointment, election or succession, or any person exercising a public function, including for a public agency or public enterprise, or any official or agent of a public domestic or international organization, or any candidate for public office.

These requirements are typically addressed in the Anti Bribery Management System (ABMS) Manual. 

Although the standard may not be thorough, to organizations practicing (corporate) governance especially Public and Public Listed Company, the manual and the associated procedures should include fraud, cartels, anti-trust/competition offences, money laundering etc.

However, this may require a joint effort between those in the financial positions and the duly authorized personnel from the management.

It is recommended the organization work closely to Bank Negara Malaysia, Security Commission, Registrar of Company/Society etc. for more information on legislation or conditions for public-listing/investment.

ANTI-BRIBERY MANAGEMENT SYSTEM - PART 1 - by Nik Zafri

While the world is not fully out of the Covid-19 pandemic, we are still facing another pandemic what seems to have no cure to it. This pandemic is known as Bribery.

Bribery in any forms has evolved itself to become part of the twisted culture in many industries and sectors - even in the civil services.

It is known as a hindrance to good and clean practices, governance, economy, social and even moral. Hence it has also lead to imbalance and creation of gaps between the rich and the poor via means of taxation and cost of living. The quality and safety of products and services provided are also badly affected by bribery.

Enforcement of the law on many cases of bribery; whilst making good progress; has also been known to meet dead-ends when powerful figures decide to intervene in the judiciary system.

Despite many government endless efforts to address bribery domestically or internationally, the progress seem to be too slow which is evident when arrests have been made only to certain small groups rather than the big planners behind bribery. 

As we all know, having laws without proper guidelines and monitoring of compliance will not be effective. Organizations and industries must adopt a self-governance by having their own standards, policies and procedures.

This is the reason why we need a specific standard now known as ISO 37000 - an ambitious effort to reduce risks of bribery in organizations and industries.

However, I still see the infamous disclaimer :

"Conformity with this document cannot provide assurance that no bribery has occurred or will occur in relation to the organization, as it is not possible to completely eliminate the risk of bribery. However, this document can help the organization implement reasonable and proportionate measures designed to prevent, detect and respond to bribery"

I believe that having the proper policies and documented information based on this standard can become evidence in the eyes of the law - thus, I honestly think that this statement is a little redundant.

I also believe that both law and standard should also provide justice to innocent victims or black sheeps which may require element of forensic auditing skills and just like financial audit, the auditors should be able to lodge reports once proven to the authorities without any tampering from the organization being audited whether the auditor is internal (staff) or an external auditor from the certification body. 

TWO ISSUES RAISED ON 26/01/2023 - JUST TO LET MALAYSIANS KNOW

 

"The requested URL was rejected. Please consult with your administrator" (How to fix it)

 "The requested URL was rejected. Please consult with your administrator"

Pretty annoying...isn't it? This usually happens with online banking or financial website. You can't blame them - these kind of websites are made to be as strong as Fort Knox)

If you start googling for an answer, there maybe "mumbo-jumbos" coming out saying that it has something to do with "cookies" (Rarely)

Just check if you are using any VPN (Virtual Private Network - to cover your tracks )or perhaps certain firewall or antivirus is "on" ) - in most cases, it's your VPN, turn it off and try surfing again.

WE HAVE MIGRATED FROM nomaswo.com to nomaswo.org

We have migrated from dot com to dot org but the services remain the same

TODAY'S FOOD FOR THE THOUGHT

Many special awards are being offered to foster goodwill and to inspire others. Unfortunately, some of these special awards; which I feel strongly; have been given to the WRONG person who knows NOTHING about the field. Trust me, we are fully aware those who are actively involved. I won't name the recipients but I think the juries should reconsider a proper standard/code of practice in their selection - otherwise they will be deemed as partial and risk losing respect. Nik Zafri - 18/0/2023 - 11:28 am

RIGHT DIRECTION BY HAVING RIGHT MIND

 

SPOOF/PISHING FAKE EMAIL USING MY NAME - PLEASE BE VIGILANT!!

Dear Friends/Associates/Partners/Family Members/Relatives - I've been alerted by a friend that someone have been using my full name and been sending email purportedly from me to his device. Please note that this is NOT my email address. The extension was made to look like genuine is because the hacker is using a fake email address by means of spoofing/pishing.

Please block such address especially if your email (device) server register "my so-called email" as spam.

Apart from checking my own device, the receiver must also check their devices as well - phone or laptop or pc. There is also a possibility, the hacker may have infiltrated your address book as well and start the automatic robo sending to everyone in the list.

Please be vigilant, try avoiding the free cleaner, call no identifier or optimizer or virus scanner as these unverified apps can be used against you as a form of spyware.

PANDANGAN MENGENAI TENAGA KERJA DARI INDONESIA

Sebagai rakyat Malaysia, saya bersetuju dengan pandangan bernas dari kedua belah pihak samada dari pihak YAB PM dan juga kepimpinan professional dari Indonesia. Masalah tenaga kerja dialami di Malaysia meliputi hampir semua sektor - pembinaan, pengilangan, peruncitan dan banyak lagi. Walaupun demikian, layanan terhadap pekerja asing dalam sektor-sektor ini agak baik walaupun masih memerlukan peningkatan secara berterusan.

Saya tidak mahu menyentuh mengenai ekonomi, "digitilization", kadar upah, faktor keselamatan dan kesihatan dll.

Apa yang saya fikirkan ialah sektor yang wajib diperhatikan ialah pembantu rumah. Walaupun majoriti rakyat Malaysia melayan pembantu rumah dengan baik dan adil, masih terdapat kes penderaan mental dan fizikal ke atas pembantu rumah. Perkara ini memerlukan kerjasama kejiranan dan masyarakat agar peka akan kejadian-kejadian seumpama ini yang sukar diperhatikan oleh pihak berkuasa kecuali terdapat laporan.

Masalah ini (walau bukan semuanya) juga melibatkan agensi berlesen pembekalan perkhidmatan pembantu rumah. Memang ada latihan yang diberikan kepada bakal-bakal pembantu rumah dan apakah hak-hak mereka. Tetapi kelemahan yang nyata ialah jarang dilakukan susulan lawatan oleh agensi-agensi ini semasa perkhidmatan dibekalkan oleh pembantu-pembantu rumah. Seperkara lagi, agensi-agensi ini perlu diberikan akses terhad kepada pangkalan data pihak berkuasa bagi mengenalpasti bakal majikan yang ingin mereka bekalkan perkhidmatan. Ini adalah untuk mengelakkan daripada perkara-perkara yang tidak diingini berlaku.

Begitu juga hak-hak majikan juga perlu dijaga dan mereka juga berhak ke atas data-data agensi atau pekerja yang bakal bekerja di kediaman mereka.

Dalam konteks ini, Kementerian Dalam Negeri menerusi Jabatan Imigresen, Polis DiRaja Malaysia, Kementerian Pembangunan Wanita, Keluarga Dan Masyarakat dan NGO seperti Persatuan Agensi Pembantu Rumah Asing (PAPA) dapat bekerjasama untuk memantau dan memberikan maklumat kepada pihak berkuasa termasuk pemeliharaan identiti whistleblower dari pihak kejiranan terutamanya input dari Rukun Tetangga.

Selain itu, penumpuan khusus masih diperlukan ke atas "agensi ulat" yang tidak bertauliah dan berlesen yang membekalkan pembantu rumah yang juga mungkin tidak mempunyai sebarang dokumen yang sah atau ditipu oleh agensi ulat berkenaan serta dirampas dokumen mereka. Ada juga kes-kes jenayah yang berlaku yang juga memerlukan perhatian yang amat serius.

KEBAKARAN DI JALAN PINGGIRAN 3/11, TAMAN PINGGIRAN PADA 10 JANUARI, 2023, JAM 11.30 PAGI

Kebakaran rumah di Jalan Pinggiran 3/11, Taman Pinggiran Batu Caves belakang rumah kediaman saya di Jalan Pinggiran 3/9 pada 10 Januari, 2023 kira-kira jam 11.00 Pagi. Semua mangsa terselamat. Saya memuji tindakan pantas Bomba Selayang dan Rawang berjaya memadamkan api dalam tempoh 15 minit. Saya juga kagum dengan pihak PDRM, TNB dan Majlis Perbandaran Selayang (MPS) yang turut berada di tempat kejadian. Dari berita yang belum disahkan, kebakaran berpunca dari kebocoran gas kerana aktiviti masakan untuk perniagaan. Pihak Forensik BOMBA dan Timbalan OCS PDRM akan melawat kawasan.'