The Governance Premium: How 'clean' Maltese firms win EU contracts
EU buyers now score integrity alongside price. Manuel Delia shows how Maltese firms can turn ISO standards, whistleblowing, and audit trails into a tender advantage.
In European public procurement, the cleanest hands often shake the winning deal. For businesses competing beyond Malta's borders, credibility is no longer a soft factor. It is a crucial asset. Regulations have adapted to reward not just the lowest bid but also the bidder that can demonstrate reliability, transparency, and control over corruption risks. In an era when reputation travels faster than paperwork, a Maltese firm's best competitive advantage may well be its capacity to show integrity in a structured, auditable manner.
Across the EU, tenders are now routinely assessed under the procurement rules' most economically advantageous tender (MEAT) formula, which balances price with quality, risk management, sustainability, and governance. This means that buyers no longer focus solely on how cheaply a contract can be delivered, but also on how safely and predictably it can be delivered. In that process, compliance evidence has become a form of insurance.
When a contracting authority compares bidders, it considers not only "Who offers the best value?" but also "Who is least likely to embarrass us?" A company that can demonstrate certified anti-bribery systems, functioning whistleblowing channels, and documented internal controls enters the race with fewer question marks. These are not abstract ethical niceties; they directly translate into higher technical scores and a lower perceived risk of contract failure or investigation.
Public authorities and large private clients are aligning on a standard checklist of integrity signals. The most recognisable are international standards that can be independently verified: ISO 37001 for Anti-Bribery Management Systems, which covers risk assessment, due diligence, and controls; ISO 37301 for Compliance Management Systems, a broader certification demonstrating that policies, training, and corrective actions are incorporated throughout the organisation; and ISO 37002 for Whistleblowing Management Guidance, which assists organisations in establishing safe, confidential reporting channels. Additionally, the EU Whistleblower Directive (2019/1937), transposed into every Member State, requires companies with 50 or more employees to have internal reporting procedures.
Alongside these standards, evaluators expect to see conflict-of-interest registers, supplier due diligence logs, gifts and hospitality policies, and audit trails of staff training. When these documents are prepared and up to date, they reduce verification time and indicate maturity. When they are absent or unclear, evaluators begin assigning risk points.
Several Member States already use integrity certification as a scoring criterion. In Italy, following guidance from the national anti-corruption authority ANAC, contracting authorities can award bonus points to bidders certified under ISO 37001. The aim is to encourage prevention rather than punishment, and firms that invested early in certification report shorter vetting times and fewer clarifications requested during evaluation. In Portugal, major public companies in the energy and transport sectors incorporate anti-corruption and compliance performance indicators into supplier assessments. A verified compliance framework is treated as a quality attribute, alongside technical capacity and sustainability.
"Certified anti-bribery systems remove question marks before they appear."
In Scandinavia, procurement agencies link "trust ratings" and third-party compliance audits to supplier frameworks: a demonstrably low-risk partner faces lighter administrative checks and can be pre-qualified for future competitions. These examples show that integrity has become measurable. The businesses that treat it as an operational system, not a PR statement, are reaping the rewards in tender efficiency and access.
For Maltese bidders, the reputational challenge is more pronounced. The island's recent grey-listing incident and ongoing scrutiny of governance mean that prejudice remains a significant factor: even when a Maltese company is fully compliant, evaluators abroad may exercise extra caution. This makes transparency not only an ethical obligation but also a market necessity. Being compliant is not enough; one must also demonstrate transparency. This does not require public self-flagellation but rather a disciplined approach to presentation. A transparent, verifiable record of compliance—supported by recognised certification—helps to reduce lingering suspicion. Conversely, a lack of transparency can lead to longer vetting processes, additional declarations, or outright rejection based on risk. It would be unfortunate if a Maltese SME with the right capabilities were to miss out on an EU-wide opportunity simply because its documentation did not inspire enough confidence. Precision in administration has become a key competitive advantage.
Preparing for EU-wide procurement isn't about hiring a law firm every time a tender arises. It's about creating a permanent, modular compliance package that can be quickly adapted to each opportunity. A practical roadmap starts with establishing the baseline: assessing exposure to bribery, conflict of interest, and supplier risk scenarios, assigning responsibilities, and documenting existing controls. The next step is to adopt recognised standards. Even partial alignment with ISO 37001 or 37301 demonstrates to evaluators that governance is systematic. Certification by an accredited body is ideal, but structured self-declaration provides a credible initial step.
A functioning whistleblowing channel is essential. A basic online or outsourced reporting tool, supported by a non-retaliation policy and clear procedures, satisfies EU requirements and shows accountability. Evidence must then be recorded, including training attendance sheets, supplier due diligence records, conflict-of-interest forms, and corrective action logs. The aim is traceability: proof that controls are adequate in practice.
Procurement documents should be prepared in advance. Filling out an ESPD (European Single Procurement Document) template with current information on tax, social security, and legal compliance saves time. At the same time, eCertis can verify which Maltese certificates meet each Member State's requirements. Lastly, the system should be tested and maintained. Conducting a mock tender helps identify gaps and bottlenecks; after each actual tender, a brief post-mortem ensures the file stays up to date. This preparation shortens turnaround times and lowers the risk of clerical errors under deadline pressure—the kind that can disqualify an otherwise firm offer.
"Whistleblowing channels aren't PR—they're operational control."
The advantages of integrity systems go beyond securing contracts. A whistleblowing mechanism can uncover operational inefficiencies or conflicts before they escalate into scandals. Supplier screening can avoid costly interruptions. Training sessions often expose procedural shortcuts that quietly diminish profit. Compliance, in other words, functions as a process enhancement.
Furthermore, a strong governance reputation benefits the company's image. Once a firm proves it can operate effectively under EU-level scrutiny, banks and investors begin to see it as lower risk. This can lead to better financing terms, another benefit of good governance.
Malta's business environment has spent recent years addressing the regulatory impacts of its reputational crisis. The next step is to turn compliance into a competitive advantage rather than merely a defensive measure. For small economies, agility is a key asset: a Maltese SME can implement ISO standards or set up whistleblowing procedures more quickly than a multinational bureaucracy can revise its manuals. If Maltese firms collectively improve their governance, they can compete more effectively internationally and help restore the country's credibility where it counts most —in everyday transactions that shape its economic reputation.
Clean governance is no longer a moral afterthought. It is a measurable component of value, priced into contracts, credit terms, and partnerships across Europe. For Malta, whose name still carries both admiration and doubt, it is also a reputational hedge: a way of turning scrutiny into an edge. Integrity now has a return on investment, and the market is paying attention.
When the Facebook account of Anthony P. Bernard, Be Communications' managing director and editor, was hacked, he expected a recovery process — not a digital maze. What followed was months of conflicting decisions, vanished business pages, a fictitious Instagram "violation", a fake hacker appeal link, and support loops that led nowhere. He explains how one hack spiralled into a full-blown business risk — and why he's still fighting for accountability.