If you have difficulty in submitting comments on draft standards you can use a commenting template and email it to admin.start@bsigroup.com. The commenting template can be found here.

We use cookies to give you the best experience and to help improve our website

Find out what cookies we use and how to disable them

ISO/NP 37012 Competence requirements of Investigators for Organizations

Source:
ISO
Committee:
G/1 - Governance
Categories:
Information management | Standardization. General rules
Comment period start date:
Comment period end date:

Comment by:

Scope

This standard specifies the competence requirements for investigators, either personnel, business associates or third parties, involved in investigations on behalf of an organization.

This document is applicable to all types of organizations regardless of the type, size and nature of the activity, as well as whether the organization is from the public, private or non-profit sector that appoints investigators.

This document is also intended for organizations providing awareness-raising and training activities related to investigations.

Purpose

assessing the competence of individuals charged with planning, conducting and concluding investigations.

The recently developed ISO TS 37008:2023 Internal investigations of organizations — Guidance provides solid theoretical and practical basis for this proposal. The global demand for internal investigation also calls for uniformity in investigative competency. Building on this momentum, a competency framework aligned with ISO 37008 would provide clear guidance for organizations and practitioners worldwide, ensuring consistent, high-quality investigative outcomes across diverse jurisdictions.

By articulating clear, objective criteria for knowledge, skills and personal attributes—ranging from legal and ethical foundations to evidence gathering techniques and professional scepticism—it enables organizations and training providers to ensure that investigators are appropriately qualified and consistently capable of delivering reliable, impartial and defensible outcomes.

Against the background of enhanced regulatory scrutiny on compliance and public expectation for accountability and justice, this proposal fills a critical gap by specifying what investigators must know and be able to do, and by promoting ongoing development and verification of competence. Ultimately, it fosters trust in investigative processes, reduces organizational risk and supports the fair resolution of internal disputes and compliance concerns.

Several ISO standards have contributed to investigations, including but not limited to ISO 37003 and ISO 37008. However, the efficiency of implementation internal investigations is closely related to investigators’ skills and competences. E.g. Fraud is a global phenomenon that transcends national borders, industries, and sectors. From public procurement fraud in government projects to embezzlement and financial statement manipulation in multinational corporations, nearly all countries and organizations face potential exposure to fraud risks. According to the Association of Certified Fraud Examiners (ACFE) 2024 Report to the Nations, 1,921 cases from 138 countries were analyzed, revealing total losses of USD 3.1 billion—an average of USD 1.7 million per case, with 22% of cases resulting in losses exceeding USD 1 million. Globally, organizations lose approximately 5% of their annual revenue to fraud. Applying this figure to the 2022 global GDP of USD 101 trillion, the annual global fraud loss is estimated to exceed USD 5 trillion. The Asia-Pacific region recorded the highest median loss at USD 1.2 million, followed by Western Europe (USD 1 million) and Latin America (USD 870,000). North America and South Asia reported the lowest median losses, both at USD 500,000. These widespread risks underscore the urgent need for a globally unified competency framework for fraud investigators. As cross-border business activities expand and regulatory scrutiny intensifies, fraud investigators play not only a reactive role in exposing misconduct but also a proactive role in due diligence and risk monitoring. Investigators’ analytical skills, cultural sensitivity, legal knowledge, and professional ethics are thus integral to the global anti-fraud architecture. A standardized evaluation framework ensures consistency in cross-border investigations, promotes international cooperation, and facilitates mutual recognition of qualifications, thereby enhancing global capacity to address increasingly complex transnational fraud schemes.

In today’s highly interconnected global economy, the demand for investigation has evolved from a regulatory obligation to a market-driven imperative. Organizations—including financial institutions, multinational corporations, NGOs, and public sector bodies—must proactively recruit professionals with specialized investigative competencies to identify, investigate, and mitigate associated risks.

Investigators have transitioned from reactive responders to strategic assets within organizational governance. A standardized competency framework enables companies to more accurately identify and appoint investigators who meet specific organizational needs, thereby improving governance quality and reducing legal, financial, and reputational risks. Moreover, the growing demand for thirdparty due diligence, whistleblower case management, and internal control reviews has created a dynamic market for professional investigative services. A formalized, standardized assessment mechanism not only safeguards investigator professionalism but also elevates industry transparency and integrity, aligning with modern market expectations for both trust and efficiency.

Comment on proposal

Required form fields are indicated by an asterisk (*) character.


Please email further comments to: debbie.stead@bsigroup.com

Follow standard

You are now following this standard. Weekly digest emails will be sent to update you on the following activities:

You can manage your follow preferences from your Account. Please check your mailbox junk folder if you don't receive the weekly email.

Unfollow standard

You have successfully unsubscribed from weekly updates for this standard.

Error