What adequate procedures look like day to day

"Adequate procedures" sounds like a legal abstraction. In practice it is a set of visible, everyday habits spread across the organisation. When they are working, this is what you see.

Risk assessment

The organisation periodically asks itself where bribery could realistically happen: which markets, which customers, which deal types, which third parties. The answers shape everything else, so that effort goes where the risk is instead of being spread thinly everywhere.

Policies people can actually use

A clear anti-bribery policy, a gifts and hospitality policy with sensible thresholds, a conflicts declaration process, and a whistleblowing route that people trust. Good policies are short enough to read and specific enough to answer real questions, like whether you can accept those tickets.

Training

Regular training, like this course, so everyone knows the law, the policies, and the red flags. Training records themselves form part of the adequate procedures evidence, which is one reason completing it matters.

Monitoring and review

Registers are reviewed, third parties are re-checked, unusual payments are questioned, and lessons from incidents feed back into the policies. Procedures that are never tested quietly rot.

Tone from the top

The MoJ guidance lists top-level commitment as a core principle for a reason. Staff calibrate their behaviour to what leaders do, not what policies say. When a manager waves through a questionable payment because the quarter needs the revenue, every person watching learns the real policy. When a leader walks away from a deal rather than pay a bribe, and says so openly, that lesson spreads further than any training course.

Whatever your role, you set tone for someone: a colleague, a new starter, a supplier. Follow the procedures visibly, decline what should be declined, declare what should be declared, and speak up when something is wrong. That, day to day, is what prevention actually looks like.