Skip to main content
Governance Authority
Category: Anti-Bribery and Corruption

Anti-Corruption Compliance Officer

Also known as: ABC Officer, Anti-Bribery and Corruption Officer, Anti-Bribery & Anti-Corruption Officer, ABC Compliance Officer
Simply put

An Anti-Corruption Compliance Officer is a senior member of an organization's compliance function who is responsible for developing and implementing policies designed to prevent and detect bribery and corruption. The role typically helps the organization comply with applicable anti-corruption laws and supports staff on ethical conduct and related governance matters. Titles, seniority, and specific duties vary by organization, sector, and jurisdiction.

Formal definition

The Anti-Corruption Compliance Officer is generally a senior officer within the compliance department mandated to design, implement, and oversee the operation of a Board-approved anti-bribery and anti-corruption (ABC) program. Responsibilities typically include maintaining anti-bribery and anti-corruption policies intended to support compliance with applicable laws (such as, in certain jurisdictions, the U.S. Foreign Corrupt Practices Act), advising the business on ethical conduct and governance issues, and supporting the prevention and detection of corrupt practices across financial and operational activities. As a compliance function, the role generally provides advisory and monitoring support and program ownership rather than assuming the board's oversight duty or first-line operational accountability, which typically remains with management; the precise scope, reporting lines, and authority depend on the entity's structure, applicable legal regime, and internal governance arrangements.

Why it matters

Bribery and corruption expose organizations to legal liability under statutes such as the U.S. Foreign Corrupt Practices Act in certain jurisdictions, as well as reputational harm and operational disruption. The Anti-Corruption Compliance Officer helps concentrate accountability for anti-bribery and anti-corruption (ABC) efforts in a senior compliance role, giving the organization a designated point of ownership for the policies and procedures intended to prevent and detect corrupt practices across both financial and operational activities. Without such a role, ABC responsibilities can become diffuse, leaving gaps between what the board expects, what management does, and what is actually monitored.

The role matters in part because corruption risk cuts across many parts of a business, from procurement and third-party relationships to interactions with public officials. A dedicated officer typically provides consistent advisory support on ethical conduct and governance questions, and helps ensure that a board-approved compliance program is implemented in practice rather than existing only on paper. This supports the distinction between program design and program operating effectiveness, an area regulators and assurance functions often scrutinize.

It is important to keep the boundaries of the role in view. As a compliance function, the ABC Officer generally provides advisory, monitoring, and program-ownership support; it does not displace the board's oversight duty or the first-line operational accountability that typically rests with management. The role's actual authority, seniority, and reporting lines depend heavily on the entity's structure, sector, and applicable legal regime, and the specifics of any legal obligation vary by jurisdiction. This entry is educational and does not constitute legal, audit, or compliance advice.

Who it's relevant to

Boards and board committees
Directors and committee members responsible for oversight of the anti-corruption program rely on the ABC Officer to implement what the board has approved and to surface relevant information. The board's oversight duty is generally distinct from, and not transferred to, the officer's program-ownership role.
Chief compliance and risk officers
Senior compliance and risk leaders coordinate the ABC Officer's mandate within the broader compliance function, clarifying reporting lines, authority, and the boundary between compliance monitoring and management's first-line accountability.
General counsel and legal teams
Legal advisors work with the ABC Officer on how policies map to applicable anti-corruption laws, which vary by jurisdiction. They help assess where a legal requirement applies versus where an internal standard or voluntary practice is being adopted.
Business and operational management
First-line managers in areas such as procurement, sales, and third-party relationships typically retain operational accountability for controls and receive advisory support from the ABC Officer on ethical conduct and governance questions.
Internal audit and assurance functions
Auditors and other assurance providers assess whether the board-approved ABC program is designed appropriately and operating effectively, testing the program the officer owns rather than owning it themselves.

Inside ABC Officer

Program Ownership and Design
The Anti-Corruption Compliance Officer typically owns the design, implementation, and ongoing maintenance of the entity's anti-bribery and anti-corruption (ABAC) program. This is a compliance function accountability, distinct from the board's oversight duty and from the operational business units that own and manage bribery risk in the first instance.
Risk Assessment Coordination
Generally responsible for facilitating periodic corruption risk assessments that consider factors such as country risk, sector risk, third-party intermediaries, and transaction types. The officer helps evaluate inherent risk and the residual risk remaining after controls, though the underlying business risk is owned by management, not the compliance function.
Policies, Procedures, and Controls
Develops and maintains policies addressing bribery, facilitation payments, gifts and hospitality, charitable and political contributions, and conflicts of interest. Distinguishing control design from operating effectiveness matters: the officer may design a control, but its effective operation depends on the business and is often tested by assurance functions.
Third-Party and Due Diligence Management
Oversees risk-based due diligence on agents, distributors, and other intermediaries, given that third parties are a commonly cited source of corruption exposure in many programs. The depth of diligence typically scales with assessed risk.
Training and Communication
Delivers targeted anti-corruption training and awareness communications, often tailored to higher-risk roles and regions. This is a preventive compliance activity rather than an assurance activity.
Monitoring, Investigations, and Reporting
Coordinates compliance monitoring, supports or oversees investigations of alleged violations, and reports on program status to senior management and, in many structures, to a board or audit/risk committee. Reporting lines and independence arrangements vary by jurisdiction, sector, and entity type.
Regulatory and Framework Context
Operates against a backdrop of anti-corruption laws and enforcement expectations that vary significantly by jurisdiction, as well as voluntary standards and guidance that describe program elements. Which specific requirements apply depends on the entity's footprint and the laws to which it is subject.

Common questions

Answers to the questions practitioners most commonly ask about ABC Officer.

Does having an anti-corruption compliance officer make the board and senior management no longer accountable for bribery risk?
No. Appointing a dedicated officer does not transfer accountability away from the board or senior management. Under most governance frameworks and many enforcement expectations, the board typically retains oversight responsibility for the compliance program's adequacy, and senior management generally owns the risk and the control environment as part of the first line. The anti-corruption compliance officer usually sits within a second-line compliance function that designs, coordinates, advises on, and monitors the program rather than assuming the underlying business risk. Where the officer's independence, seniority, and reporting lines are inadequate, that is often treated as a governance failing at the board and management level, not merely an officer-level one. This entry is educational and not legal or compliance advice; specific accountability structures depend on jurisdiction, entity type, and the facts.
Is the anti-corruption compliance officer the person who investigates and audits whether controls actually work?
Not typically, and conflating these roles can undermine independence. Designing and monitoring anti-corruption controls is generally a second-line compliance activity, whereas providing independent assurance over the effectiveness of those controls is usually an internal audit (third-line) function. In many organizations the compliance officer may coordinate or oversee certain investigations, but combining program ownership with independent assurance over that same program can create a self-review conflict. Some organizations separate investigations into a distinct function or share responsibility with legal, HR, or internal audit depending on the matter. The precise allocation depends on the organization's structure, its three-lines model, and applicable expectations; this entry does not prescribe a single correct design.
To whom should an anti-corruption compliance officer report, and why does the reporting line matter?
Reporting lines are generally structured to protect the officer's independence and authority. In many organizations the officer reports functionally to the board or a board committee (such as the audit or a dedicated risk/compliance committee) with an administrative line to a senior executive such as the general counsel or chief compliance officer. A direct or dotted line to the board is often viewed as helpful so that concerns can be escalated without being filtered by the business units being monitored. The appropriate arrangement varies by entity type, size, and jurisdiction, and organizations should weigh independence against practical integration with the business. Legal and regulatory expectations on reporting lines differ, so professional judgment and, where relevant, legal advice are appropriate.
What activities does an anti-corruption compliance officer typically coordinate as part of the program?
Commonly coordinated activities include maintaining anti-corruption policies and procedures, conducting or overseeing bribery and corruption risk assessments, managing third-party and intermediary due diligence, administering gifts, hospitality, and facilitation-payment controls, delivering training and awareness, and overseeing reporting channels and monitoring. The officer generally advises on and coordinates these activities rather than performing every control personally; many controls are executed by business units in the first line. The specific scope depends on the organization's risk profile, sector, and geographic footprint. This is a general description of typical practice, not a mandatory checklist or a substitute for tailored program design.
How does an anti-corruption compliance officer interact with the wider enterprise risk and internal audit functions?
Interaction is usually a matter of coordination across the lines of defense rather than merged responsibilities. The officer typically feeds bribery and corruption risk information into the broader enterprise risk management process so that this risk category is reflected in the organization's overall risk profile, appetite, and reporting to the board. Internal audit, as an independent assurance function, may test the design and operating effectiveness of anti-corruption controls and report results separately to the board or audit committee. Maintaining clear boundaries helps preserve internal audit's independence and avoids the compliance function assuring its own work. The exact interfaces depend on how the organization has structured its governance, risk, and assurance functions.
How can an organization assess whether its anti-corruption compliance officer role is adequately resourced and empowered?
Organizations generally consider factors such as the officer's seniority and standing, independence and reporting lines, access to the board, sufficiency of budget and staff relative to the organization's bribery and corruption risk exposure, and the authority to escalate concerns and influence business decisions. Some frameworks and enforcement guidance in various jurisdictions treat under-resourcing or lack of genuine authority as an indicator of a program that exists on paper rather than in practice. Adequacy is fact-specific and proportionate to the organization's size, risk profile, and geographic and sector exposure. There is no single benchmark that applies universally, and any assessment benefits from professional judgment and, where appropriate, legal or compliance advice.

Common misconceptions

The Anti-Corruption Compliance Officer 'owns' corruption risk and is accountable when a violation occurs.
Under a typical three-lines model, the business units that engage third parties and conduct transactions own and manage the risk (first line). The compliance function, including this officer, generally provides oversight, expertise, and challenge (second line), while the board retains oversight responsibility. Accountability for the underlying conduct usually sits with the business, not solely with the compliance officer.
A single global standard or framework dictates exactly what the role must do.
There is no single universally mandatory framework. Anti-corruption obligations arise from binding laws that differ by jurisdiction, supplemented by non-binding guidance and best-practice standards. The role's scope, authority, and reporting lines depend on the entity's jurisdictions, sector, size, and structure, and on management's own judgment about program design.
Because controls are designed and documented, the program is effective.
Control design and operating effectiveness are distinct. A well-designed policy or diligence procedure does not by itself demonstrate that controls operate as intended in practice. Testing operating effectiveness is typically a separate activity, often performed by internal audit or another assurance function rather than by the compliance officer who designed the controls.

Best practices

Base the program on a documented, periodic corruption risk assessment, and prioritize resources toward the highest-risk countries, sectors, third parties, and transaction types rather than applying a uniform approach.
Clarify roles across the three lines in writing, specifying what the business owns, what the compliance function oversees, and what assurance functions independently test, to avoid conflating design responsibilities with independent effectiveness testing.
Establish clear reporting lines and sufficient independence and authority for the role, including a route to escalate matters to a board committee, calibrated to the entity's jurisdiction, sector, and structure.
Apply risk-based, proportionate third-party due diligence, scaling depth to assessed risk and refreshing diligence when circumstances change.
Deliver targeted, role-specific training for higher-risk functions and regions rather than generic awareness alone, and document completion and content.
Confirm which binding anti-corruption laws actually apply to the entity's footprint before relying on any single framework, and treat program design decisions as informed judgments requiring qualified legal and compliance input rather than assuming one-size-fits-all rules.