Fighting Corruption as a Condition of Survival

1. Executive Summary

This chapter takes up the state after four links in Part Two have been completed: an existing state whose capacity must be strengthened; sovereignty placing final authority over decisions and force within constitutional institutions; a rule of law subjecting those institutions themselves to rules and review; and effective government turning policy, law and budgets into measurable, correctable outcomes. Yet public capacity is not inherently neutral. As the state's capacity to spend, contract, appoint, license and implement expands, so does the value of unlawfully controlling the decisions distributing those resources. Anti-corruption is therefore not a subsequent oversight issue, but a condition for designing the capable state itself.¹

This chapter's diagnosis neither reduces corruption to petty bribery nor indiscriminately describes all Iraq as a “corruption system”. Corruption is a legal and institutional concept with multiple forms, and risk severity differs across sectors and processes. It becomes systemic when abuse of authority recurs within a network of incentives, protection and expectations, weakening formal rules against an informal rule suggesting that access to contracts, jobs, services or decisions depends on private relationships. Reform therefore requires process-level diagnosis of risk, not stigmatisation of society or the entire public apparatus.

The chapter rests on a crucial methodological distinction: administrative error is not automatically corruption, underperformance is not embezzlement, waste is not synonymous with crime, and a disciplinary violation becomes criminal corruption only when its legal elements and evidence are established. This distinction protects both integrity and professional employees. A system treating every unsuccessful decision as criminal suspicion drives paralysis and avoidance of responsibility; a system confusing leniency with “protecting decision-making” opens the door to impunity. What is needed is risk-based oversight and a clear route from observation to examination, then judicial investigation where legal grounds exist.

Iraq's baseline requires epistemic humility. The latest published Corruption Perceptions Index for 2025 gave Iraq 28 out of 100 and a rank of 136 among 182 countries and territories. This is a comparative signal of perceived public-sector corruption risks, not a measure of corrupt funds, affected contracts or actual offences.²

Conversely, no unified published national series yet tracks reports from receipt through investigation, referral, judgment, enforcement and recovery. Nor is there a common baseline distinguishing suspected funds from seized or frozen funds, funds ordered recovered, and money actually returned to the treasury. Indicators of citizen and business experience of bribery demands, fear of retaliation and the cost of accessing reporting channels are also not published regularly under one definition. Iraq Vision 2045 therefore makes baselines and an integrated register first-phase tasks, rather than turning scattered figures into a falsely certain picture.

The proposed integrity system comprises connected functions: prevention; detection; reporting and protection; investigation and prosecution; enforcement of judgments and asset recovery; and system correction. Prevention begins inside ministries before it begins at the Commission of Integrity: powers are separated, exceptions recorded, decisions traceable and conflicts of interest managed before participation in decisions. Detection becomes more effective when contract, payment and performance data can be linked and analysed, but every automated signal remains a “risk flag” for examination, not evidence of guilt.

Contract and procurement risk is not confined to the award stage. Private benefit may enter through defining needs, feasibility studies, specifications, qualification, bid evaluation, change orders, measurement, payment or handover. The contract cycle must therefore be traceable from need to operation, separating those defining the need from evaluators, implementers and auditors, and analysing concentration patterns, contract splitting, change orders and disproportionate payments. Public Contracts Implementation Instructions No. 1 of 2025 became a modern framework applied from 2026 under the Ministry of Planning's official circular. Their success, however, is measured by what happens through the contract cycle, not merely by their issuance.³

For employment, the chapter examines merit through integrity rather than performance, which the preceding chapter addressed. A legitimate political position differs from a professional civil-service role. Risk arises when jobs are sold, connections and favouritism bypass legal requirements or confer private benefits, or promotions, transfers and sensitive posts build dependency. This establishes no general judgment on government recruitment; it requires clear rules for announcements, documentation, auditing, conflicts of interest and risk analysis.

The chapter treats conflicts of interest as risks preceding corruption. A personal, family or commercial interest connected to a public decision does not automatically constitute a crime, but requires disclosure, recusal or restricted participation and decision review. Financial disclosure likewise cannot succeed by measuring form-submission rates alone: forms must connect to verification, matching and explanations of discrepancies, followed by a fair legal process if indicators warrant investigation. The Commission of Integrity and Illicit Enrichment Law No. 30 of 2011, amended by Law No. 30 of 2019, provides an important institutional basis for these functions.⁴

Transparency in this Vision is not publishing piles of files. It means making information necessary for accountability accessible, searchable, understandable and timely: who decided, on what basis, how much was allocated, who won the contract, what changed, what was paid and what happened to an audit finding? As of the freeze date, the legislative record for the draft Right to Access Information Law shows a first reading in February 2024 and a second in August 2024, without a recorded vote or publication of an enacted law. This chapter therefore treats information access as a legislative and implementation gap requiring resolution.⁵

The institutional map rests on complementary functions rather than proliferating agencies. The Federal Commission of Integrity carries out preventive, investigative, disclosure and recovery functions under its law. The Federal Board of Supreme Audit provides external financial oversight under Law No. 31 of 2011, as amended. The judiciary and Public Prosecution Service safeguard judicial proceedings. Internal control is each institution's first line of defence. Parliament legislates and exercises political oversight rather than determining criminal liability. The challenge is not for everyone to be an “anti-corruption actor”, but for each to know its function and for cases to move between functions without loss or duplication.⁶

Transformation spans four phases. In 2027–2030, risks, cases, findings and contracts become visible and traceable. In 2031–2035, oversight moves from reaction to integrity by design, traceable contracting, verification and financial and digital analysis. In 2036–2040, the state focuses on reducing repeated violations and changing incentives and expectations sustaining systemic corruption. In 2041–2045, integrity becomes a stable function above governments and individuals: cases are detected and addressed, recovered money returns to the state, and enabling processes change so they do not reproduce the incident.

Vision 2045 does not promise a “corruption-free Iraq”; that promise cannot be measured. The more demanding aim is a state where corruption is harder to execute, more likely to be detected, less able to buy protection and more amenable to recovery of its effects. It neither confuses suspicion with conviction nor uses integrity against opposition, and it prevents office, money and influence from turning public capacity into private property. This closes Part Two: a capable state, decisions within its institutions, institutions under law, a government that delivers, and integrity protecting outcomes from capture.

2. From Effective Government to Protecting Public Capacity

The preceding chapter concluded that effective government is not the largest apparatus or the most prolific producer of official letters and orders, but one that knows the outcome, its owner, resources, implementation route, indicator and required response to deviation. This raises integrity to a new level. Where responsibility is unclear, corruption can hide in disorder; where responsibility is clear and spending and contracting faster, capturing decision points becomes more valuable. Performance reform and anti-corruption are therefore not parallel tracks but mutually necessary conditions for the state to function.

A weak state may fail because it cannot finish projects, apply laws or collect data. A capable state without integrity can fail differently: a contract finishes on time but was designed for a particular party; a digital platform is built but permissions allow untraceable record changes; an employment target is met but jobs go to a protection network; or payments are made precisely while the authorising assessment lacks independence. This explains “a condition of survival”: captured capacity does not disappear, but works efficiently for the wrong beneficiary.

This does not mean every discretion is a risk to abolish. Modern administration needs room to choose the best solution when law cannot anticipate every circumstance. The problem is discretion that lacks justification, records or review, particularly when combined with personal benefit, conflicts of interest and weak traceability. Sound design does not replace officials with machines; it defines decision space, constraining criteria, required records, exception reviewers and the point at which deviation triggers oversight examination or investigation.

Anti-corruption philosophy therefore shifts from campaign to system. A campaign may increase case numbers briefly, but a system changes corruption's cost and likelihood of detection, protects reporters, prevents decision-makers controlling an entire cycle, and ensures audit findings do not die in reports, judgments do not remain paper, recovery orders do not disappear between enforcement bodies, and cases generate lessons that redesign processes.

3. Operational Definition: What Is Corruption, and What Is Not?

This chapter operationally defines corruption as abuse of entrusted authority or responsibility to obtain or confer a private benefit at the public interest's expense. The definition has three links: public authority or trust, misuse of it, and direct or indirect private benefit. Benefits may be money, jobs, contracts, protection, privileges, regulatory decisions or advantages for political, family or commercial networks. A costly or unsuccessful decision alone does not establish these elements.

Different forms follow from this definition. Bribery is a benefit paid or solicited to alter official conduct. Embezzlement is unlawful appropriation of money or assets held in custody or trust. Abuse of office directs powers towards private purposes. Connections and favouritism become corruption when used to bypass rules or confer unlawful benefits. Clientelism is organised exchange between influence and benefits that can subordinate public decisions to network interests. Grand corruption is defined not only by monetary value, but by the level of authority and ability to alter decisions, rules or allocation of extensive resources.

Political corruption occurs when political authority or the ability to shape public decisions is used for private gain, to protect an interest network or to change the rules in a private party's favour. It is not synonymous with political negotiation, coalition-building, legitimate political appointments or disagreement over budget priorities. Administrative corruption occurs within official duties, procedures and everyday discretion. Financial corruption concerns public money, revenue, assets, expenditure or transfers. All three may occur in one incident.

Source: Prepared by the Iraq Vision 2045 team, drawing on the evidence file and Iraqi law | Data year: 2026 | Methodological note: final criminal classification rests with investigative and judicial authorities.

These boundaries are necessary to protect implementation capacity. Employees fearing every professional judgment may become grounds for suspicion will choose not to decide, restoring the obstruction addressed in the effective-government chapter. Conversely, “protecting good-faith employees” must not become immunity from decision review or accountability for abuse of authority. Sound design distinguishes legitimate professional risk, gross negligence, violations and corruption, assigning each its own pathway.

4. Corruption as a System, Not Isolated Cases

Explaining corruption solely as individual moral failure fails when informal rules predict outcomes better than formal ones. In the principal–agent model, officials possess information and authority not fully available to citizens or the state; this asymmetry can serve private gain when oversight is weak and punishment remote. Yet the model is insufficient when actors expect others to behave similarly. The problem then becomes collective: individual integrity appears costly if a network can punish or exclude those who uphold it.

Systemic corruption does not require every employee to be corrupt. Interconnected links protecting each other suffice: an official directs a need, an expert writes specifications, an intermediary controls competition, a body grants an exception, a contractor provides benefits, and oversight fails to carry correction through to the outcome. Replacing one person does not repair this system if incentives and flows remain unchanged. The Vision therefore focuses on control points, conflicts of interest, traceability and correction, not rhetorical “purification” of the apparatus.

There is also a social-expectations loop. If citizens or businesses believe services and contracts move only through connections or unofficial payments, formal compliance may become less rational even for those preferring integrity. Conversely, published requirements, known timeframes, traceable and challengeable decisions and visible exceptions reduce intermediaries' value. This connects to “Law, Order and Discipline” without repeating it: institutional integrity makes the official route dependable.

Source: Prepared by the Iraq Vision 2045 team, drawing on the evidence file and principal–agent and collective-action models | Data year: 2026 | Methodological note: an explanatory causal diagram, not a measure of corruption prevalence.

“Integrity by design” breaks this loop before its end. It does not assume every actor will resist temptation through personal virtue; it makes unilateral control harder, creates decision trails, separates functions, increases detection probability, protects those who detect wrongdoing and ensures correction reaches the process rather than only the individual. Integrity becomes easier, while corruption becomes costlier and riskier.

5. The Iraqi Baseline: What We Know and What We Must Not Claim

A corruption baseline cannot be built from one number. Perception indicators measure expert or business views of public-sector corruption and help compare trends, but do not measure stolen sums or the proportion of corrupt employees. Citizen-experience indicators ask what people directly encountered or believe about connections and bribery, but depend on wording, samples and year. Oversight and judicial records measure system activity: reports, investigations, orders, cases, judgments and recovery. Increases may reflect more corruption, better detection or changed definitions. These layers must therefore be read together.

The latest CPI available at the freeze date is the 2025 edition, in which Iraq scored 28/100 and ranked 136 of 182, two points higher than in 2024. This signals improved comparative perception, not proof that the quantity of corruption fell, and is unsuitable for annual ministry targets. More important are direct measures of functions the state can change: contract traceability, report-triage time, closure of audit findings, disclosure verification, repeated violations and actual recovery.⁷

Earlier surveys signal the environment in which the system operates. The 2019 Arab Barometer showed high perceptions of connections being used in recruitment, and substantial shares believing bribery might be necessary for better services. These relatively old figures reflect perceptions rather than direct counts of payments. The Vision therefore uses them not to judge public employees or citizens, but to justify a current foundational survey in 2027 distinguishing “Do you believe?”, “Were you asked?”, “Did you pay?”, “Did you report?” and “Did you fear retaliation?”⁸

Administrative data require definition reform before wider publication. Information submitted is not necessarily a formal report; a report is not a case; a case is not a defendant; a summons is not a judgment; and a judgment is not necessarily a final conviction. Funds referenced in a case differ from seized or frozen funds, which differ again from confiscated funds, funds ordered recovered and funds actually recovered. Combining these stages into one “recovered funds” figure misleads decision-makers and the public.

Source: Evidence File V1-D02-C05; Transparency International; earlier project sources | Data years: 2019–2026 | Methodological note: values without a unified national definition are recorded as baseline gaps.

The governing data decision is to begin not by claiming a unified national corruption figure, but by building a data dictionary. Every body must know what an “incoming report” and a “completed case” mean, each stage's start and end dates, what constitutes actual recovery, and how a traceable contract is counted. Only then can indicators guide policy rather than supply rhetoric.

6. The Legal and Institutional Framework: A System of Functions, Not a List of Agencies

Iraq does not begin in a legal vacuum. The Constitution establishes equality before the law, separation of powers, judicial independence, litigation rights and procedural safeguards, and places the Commission of Integrity and Federal Board of Supreme Audit among bodies regulated by law. These principles do not alone create an integrity system, but define its boundaries: no exceptions for influential actors, no conviction outside courts, no oversight body above the Constitution, and no anti-corruption rationale for abandoning rights.⁹

The Federal Commission of Integrity and Illicit Enrichment Law No. 30 of 2011, amended by Law No. 30 of 2019, is a legal cornerstone for investigation, prevention, financial disclosure, illicit enrichment and recovery of corruption proceeds within its mandate. Federal Board of Supreme Audit Law No. 31 of 2011, as amended, governs external auditing of public funds. Federal Financial Management Law No. 6 of 2019, as amended, provides the modern public-finance framework, while the Penal Code and Criminal Procedure Law govern criminalisation and judicial procedure. Public Contracts Implementation Instructions No. 1 of 2025 provide a modern procurement framework.¹⁰

Functionally, prevention begins inside executive bodies: process design, internal control, risk management, separation of powers, access permissions and documentation. External oversight of accounts and performance follows. Criminal suspicion then moves, according to jurisdiction, through investigation, referral and adjudication. Disclosure, conflict-of-interest and asset-recovery systems operate alongside this chain. This prevents a common error: turning auditors into investigators, investigators into judges, parliament into a criminal fact-finder or the media into a court.

Source: Iraqi Constitution; laws in force; Evidence File V1-D02-C05 | Data year: 2026 | Methodological note: a simplified functional map.

The rule is “function before institution”. If audit-finding follow-up exists but findings remain unresolved, the first response is not another council. If data linkage is weak, fix linkage, permissions and standards. If independence, resources or skills are deficient, address them within existing bodies unless law demonstrably prevents the function. Institutional proliferation can increase overlap and disperse responsibility until findings belong to everyone and no one.

7. The Anti-Corruption Chain: From Prevention to System Reform

Integrity-system strength is measured across the whole chain, not its most visible links. Arrest or referral matters, but does not prove success if a report was lost beforehand, a witness left unprotected, investigation prolonged without standards, a judgment unenforced, an asset not returned, or the same process left open to corruption. Iraq Vision 2045 therefore adopts one operational chain making every transition traceable.

Source: Prepared by the Iraq Vision 2045 team, drawing on the evidence file | Data year: 2026 | Methodological note: movement between stages does not imply conviction.

The first phase must build a unified case-chain register, not a database of suspects' names. The register is an administrative tool linking case number, transition date, stage decision and responsible body, with layered permissions protecting investigation secrecy and personal data. It allows the state to see accumulations, slow transitions, repeated returns and the share of judgments reaching enforcement without publishing information harmful to defendants or witnesses.

Even within the register, a single success indicator must be avoided. Shorter investigations with poorer files and more returns or reversals do not improve the system. More reports after a trusted channel opens may signal success rather than failure. A balanced dashboard must consider time, quality, progression, recovery and correction, interpreting figures in context.

8. Political, Administrative and Financial Corruption

8.1 Political Corruption: Public Authority Used to Protect Private Benefit

Defining political corruption is particularly sensitive because legitimate competition overlaps with the exercise of authority. The Vision does not regard political negotiation as inherently corrupt, every political appointment as criminal or budget disagreement as an accusation. The boundary is use of public authority or influence derived from it to confer unlawful private benefit, shield a network from accountability or alter a rule or decision for a provable private interest.

Risk becomes systemic when networks influence several links: appointing process controllers, selecting beneficiaries, obstructing oversight and preventing correction. Criminalising an isolated bribe is then insufficient; the state needs interest transparency, conflict rules, independent investigation and courts, and decision and contract traceability. Yet every accusation remains subject to evidentiary standards. A national document must not label parties or individuals “corrupt” without judgments or strong official evidence.

8.2 Administrative Corruption: The Exception That Becomes a Shortcut

Administrative corruption arises where officials or managers interact with procedures, licences, services or benefits. Obstruction can create corruption opportunities by enabling the sale of “expedited access” to what should be a right. The remedy is not removing every control, but re-engineering processes to reduce steps adding no protection, publish requirements and timeframes, record rejection and exception reasons, and let citizens track transactions and seek redress. The preceding chapter built this machinery for efficiency; this chapter adds integrity to its design.

In sensitive roles, risks vary with authority: procurement, payments, revenue collection, licensing, inspection, allocation of land or assets, inventory management or amendable databases. Anti-corruption therefore cannot impose one control on every employee. It needs a risk map identifying roles requiring stronger separation of powers, exception review or dual verification, without excessive oversight multiplying signatures to no real effect.

8.3 Financial Corruption: Protecting Money from Commitment to Impact

Financial corruption is not limited to cash embezzlement. It may involve uncollected revenue, assets valued or transferred to favour a party, transfers, settlements, exemptions, payments for unverified work or change orders increasing contract value after competition. Financial integrity therefore connects financial-management law, internal control, external audit, banking and accounting records, and the system's ability to link payment to evidence of execution.

Traceability is the governing criterion. Every significant financial commitment should leave a chain: legal basis, authorised decision-maker, statement of need, appropriation, order or contract, verification of entitlement, payment approval, accounting entry and beneficiary. This does not make corruption impossible, but raises the cost of concealment and enables deviation analysis.

9. Contracts, Procurement and Jobs: The State's Most Sensitive Points

9.1 The Contract Cycle: Corruption Does Not Begin at Bid Opening

Government contracts combine money, authority, technical expertise and time. Focusing only on award leaves most risks unaddressed. A need may be invented for a non-priority project; specifications tailored to one product; contracts split to avoid competitive thresholds; qualification designed to exclude rivals; scores assigned under flexible criteria; contract value redistributed through post-award change orders; or payments made before work is verified. Each point needs a different control.

Source: Evidence File V1-D02-C05; Public Contracts Implementation Instructions No. 1 of 2025 | Data years: 2025–2026 | Methodological note: red flags are examination indicators, not proof of corruption.

Open contracting means more than publishing tenders. The required outcome is a data chain showing plans, notices, bids, awards, contracts, amendments, payments and progress to the extent permitted by law. Searchable, linkable data let oversight bodies, the state and society analyse concentration, recurring changes and differences between progress and payment. Publishing unsearchable files months after events does not achieve the same purpose.

Knowing who stands behind contractors also matters. A “beneficial owner” is the natural person who ultimately owns or controls a legal entity under the applicable legal definition. For integrity, this can reveal connections relevant to conflicts of interest or asset tracing. The Vision does not assume Iraq already has a complete register automatically available for every purpose. It makes development of a lawful, verifiable beneficial-ownership mechanism part of phase two, once the legal foundation is complete.

9.2 Integrity in Public Employment: Merit as a Barrier to Capture

The preceding chapter addressed merit because professional administration improves implementation. Here merit is an integrity barrier. Published job requirements, documented selection, identified committees and accessible appeals make selling jobs or allocating them for loyalty harder. Explainable promotions, transfers and sensitive appointments reduce networks' ability to distribute benefits within administration.

A strict distinction must remain between political office and professional employment. Democracies have political posts that change with government. Risk begins when political loyalty extends into roles meant to remain professional, or employment is exchanged for private benefit or used to bypass legal requirements. Sensitive posts therefore need conflict-of-interest maps, separated powers and audits of appointments and sudden list or payroll changes, not an assumption that every administrative change is corrupt.

10. Conflicts of Interest, Illicit Enrichment and Financial Disclosure

Conflicts of interest are the most important prevention point because they precede decisions. A conflict may be actual, where an existing private interest directly clashes with a decision required of an official; potential, where such an interest may arise; or apparent, where a reasonable observer could doubt impartiality even without actual benefit. The purpose is not to criminalise relationships, but to protect decisions and trust. Systems therefore need disclosure, assessment, recusal and documented action before risks become corrupt acts.

Interests include company ownership or management, investments, gifts, debts, outside employment, family ties to contractors, negotiations for future employment or rapid moves from regulatory office to an entity previously supervised. Not all such situations are absolutely prohibited; law and public policy determine disclosure requirements, prohibitions and approval needs. The decision must not be left solely to the person's own judgment.

Source: Amended Commission of Integrity and Illicit Enrichment Law; evidence file; OECD principles | Data year: 2026 | Methodological note: measures require legal adaptation to the category of declarant and role.

Financial disclosure is a verification tool, not a compliance ritual. A sound system begins by defining who declares, what is included and when, followed by secure storage, risk classification, matching against lawful data sources, requests to explain discrepancies, professional examination and legal progression if serious indicators persist. High submission rates are not cause for celebration without knowing verification coverage or discrepancy-resolution time.

Illicit enrichment requires particular caution. Wealth increases apparently disproportionate to lawful resources may justify examination under the law, but do not themselves establish guilt. The mechanism must operate with defence rights, privacy, evidence rules and judicial jurisdiction, ensuring an important integrity tool does not become a means of defamation or political pressure.

11. Transparency and Access to Information

Useful transparency answers questions rather than merely proving a document was published. In public-finance management, citizens, researchers, oversight bodies and decision-makers need to understand budget structure and execution, procurement plans, contracts and amendments, completion indicators, achieved outcomes and responses to audit findings. The state must therefore move from scattered files to structured, searchable, downloadable and linkable data, with clear fields, update schedules and ownership.

Transparency is not absolute. Legitimate limits protect privacy, investigation secrecy, genuine security and legally protected commercial secrets. Exceptions must be specific, reasoned, proportionate and reviewable, not broad labels concealing everything about a decision. Oversight and judicial statistics must also remove information identifying protected persons or harming fair trials.

As of the freeze date, the published legislative record for the draft “Right to Access Information Law” shows no vote or publication in the Iraqi Gazette after the first reading on 14 February 2024 and second on 3 August 2024. The Vision therefore does not base programmes on an unverified federal law in force. Phase one requires completing legislation or developing proactive executive publication rules within existing law, without claiming those rules fully replace a legally regulated right.

Source: Prepared by the Iraq Vision 2045 team; Iraqi legislative-process record; evidence file | Data years: 2024–2026

Media and civil society are part of accountability when information is usable. They can compare contracts, detect concentration patterns, track government promises or question contradictions. They do not replace courts. The governing formulation is: media and civil society identify signals and raise questions; investigators gather evidence; courts establish criminal liability through lawful procedures.

12. Internal and External Oversight: From Findings to Correction

A large state cannot rely on external oversight arriving after problems occur. Every institution needs an internal line of defence before and during spending and decisions: separated powers, risk review, professional internal audit, defined digital permissions, audit trails, exception monitoring and stronger controls for sensitive roles. Internal control is not a stamp count. Every step must justify the risk it reduces, or it becomes added delay and another point of friction.

External oversight complements rather than replaces internal control. The Federal Board of Supreme Audit reviews finances and performance from outside the implementing administration; the Commission of Integrity acts within preventive and investigative mandates; courts determine liability; parliament oversees policy and performance and legislates; media and civil society expand public knowledge. System strength appears when the same finding does not recur year after year without a correction owner and verification deadline.

Source: Prepared by the Iraq Vision 2045 team, drawing on the evidence file and performance-management logic in V1-D02-C04 | Data year: 2026

This model prevents two opposite errors: closing a finding with a written response without verifying changed conditions, and leaving it open indefinitely until it becomes an indelible administrative stigma. Closure must be evidence-based, with later retesting available for significant risks.

The “share of significant findings closed after independent verification of correction” could become an important national indicator, but no baseline is currently established. Work in 2027 therefore begins by standardising finding classifications and closure definitions before setting a target. Recurrence must also be monitored: closure rates may look high while the same defect returns in a new form.

13. Protecting Whistleblowers and Witnesses: Protecting Information and Those Who Hold It

Whistleblowers, informants, witnesses, experts and victims have legally and functionally distinct roles. A whistleblower may expose wrongdoing inside an institution before becoming a party to proceedings; an informant provides information to a competent body; a witness gives evidence in investigation or trial; an expert provides a technical opinion; and a victim suffers the incident's harm. Conflating these roles leaves protection incomplete because employment protection differs from physical protection or identity confidentiality in criminal proceedings.

Iraq has Law No. 58 of 2017 on the Protection of Witnesses, Experts, Informants and Victims, with subsequent regulations and instructions, providing a framework for covered cases. It should not automatically be presented as comprehensive protection against every form of workplace retaliation faced by employees reporting internally before criminal proceedings begin. The Vision therefore addresses the gap functionally: internal and external channels, confidentiality, protection against retaliation, transfer or employment measures where needed, data and identity protection, legal support, and a route for malicious reports that does not intimidate good-faith reporters.¹¹

Anonymous reporting is useful in some contexts, but needs a design allowing follow-up communication and requests for further information without revealing identity. Confidentiality must not remove accountability for report handling. The system records receipt, triage and decision times, separates reporter identities from examination teams where possible, restricts access to need-to-know and records who opened or copied files.

The Vision does not recommend automatic financial rewards for whistleblowers as a general rule. Legal models may exist in specific contexts, but transfer requires testing effects, malicious incentives and legal suitability. Iraq's priorities are trust, protection, prompt handling and non-retaliation: the best channel is worthless if employees believe its first result will be disclosure of their names.

14. Investigation, Accountability and Recovery of Funds and Assets

14.1 Investigation: From Paper Files to Analysis of Money, Contracts and Data

Complex corruption cases require multiple skills: reading contracts and specifications, accounting and cash flows, company-ownership analysis, digital evidence and understanding administrative decision pathways. More investigators alone are insufficient without specialisations and cooperation with data-holding bodies. The state also needs administrative time standards to measure file accumulation without deadlines undermining investigative independence or defence rights.

Interagency cooperation must rest on protocols rather than personal contacts. These define permissible requests, legal bases, approval authority, response times, digital-evidence chain of custody and access. They serve cases and protect privacy simultaneously, reduce repeated document requests and identify responsibility when decisive information is delayed.

14.2 Accountability: No Selectivity and No Defamation Before Judgment

Anti-corruption fails morally and institutionally if it corrupts justice in integrity's name. The presumption of innocence, defence rights, fair trials, judicial independence and appeal rights are not obstacles; they make outcomes legitimate and durable. Selective leaks or declarations of guilt before judgment can turn oversight bodies into political tools, damage cases and undermine trust in justice.

Success is not measured by arrests alone. More arrests may accompany a broad campaign, but say nothing about file quality, judgments, recovery or prevention. Better measures track case progression rates, stage durations and reasons for return or closure, while protecting individual confidentiality. The aim is to understand system quality, not produce publicity figures.

14.3 Asset Recovery: From Judgment to the Return of Value

“Recovered funds” is often used to conflate different legal stages. This chapter adopts a strict vocabulary: suspected money is not seized; seized money is not confiscated; confiscation or an order for recovery does not mean actual return to the treasury. Every figure must identify its stage, date and recording body. This prevents inflated recovery achievements while also recognising value temporarily frozen during proceedings.

Cross-border recovery is harder because it requires ownership tracing, judicial cooperation, mutual legal assistance and sometimes proceedings abroad. Iraq has legal and institutional arrangements in this field and can benefit from international expertise such as the World Bank–UNODC Stolen Asset Recovery Initiative (StAR). Mechanisms must nevertheless respect national law, agreements and evidence requirements in foreign jurisdictions.¹²

Source: Prepared by the Iraq Vision 2045 team, drawing on the evidence file and asset-recovery methodology | Data year: 2026

15. Integrity by Design and Digital Analysis

Anti-corruption does not begin when a file reaches investigators. It begins when a ministry or body designs its processes. “Integrity by design” means service, contract or data-register designers ask how the process could be abused, then remove or control risk points before operation. This resembles engineering safety: do not rely solely on user vigilance when a barrier can prevent errors or detect them quickly.

Every high-risk process must answer consistent questions: can one person initiate, approve and pay a transaction? Are exceptions recorded and reasoned? Can records be changed retrospectively without a trail? Do users know requirements and timeframes? Can the body identify a decision-maker's interest in a contractor? Are documents repeated because bodies do not exchange data? Is there a human interaction point adding no protection? Are buyer, implementer, assessor and auditor roles sufficiently separated?

Source: Prepared by the Iraq Vision 2045 team, drawing on the evidence file | Data year: 2026

Digital analysis adds important capability: detecting closely timed contract splitting, supplier concentration, synchronised bid patterns, unusual change orders, payment–progress discrepancies or connections between company and official data. But “an algorithm does not convict a person”. Signals require human examination, reviewable explanations, legal authority for access to protected data and fair procedure before consequential decisions.

The illusion that digitisation automatically cleans up processes must be resisted. Digital systems can entrench corruption if administrative permissions are unlimited, suppliers monopolise code and data, audit trails are absent or classification rules can be changed without review. Information security, identity and access management, record backups, continuity plans and prevention of vendor lock-in therefore form part of integrity design, without turning this chapter into a cybersecurity strategy.

16. The National Strategy and UNCAC: Build on What Exists, Rather Than Start from Zero

Iraq does not enter 2027 without a strategy or international commitments. It is a party to the United Nations Convention against Corruption, with national institutions and experience accumulated across earlier cycles and strategies. Official Commission of Integrity sources in 2025–2026 also identify a National Integrity and Anti-Corruption Strategy 2025–2030 as the current framework. Vision 2045 therefore proposes no parallel strategy renaming existing work; it uses the 2045 horizon to secure functions that should outlast each strategy cycle.¹³

UNCAC is used as a checklist, not a substitute for Iraqi policy: prevention, criminalisation of relevant acts, international cooperation, asset recovery and technical assistance. The question is not how many convention articles can be cited, but where implementation, data or coordination gaps exist and how to close them under Iraqi law. International assessment thereby becomes a verification source and positive pressure, not the sole indicator defining national success.

The same principle applies to the current strategy: expand what works, evaluate what has expired, and do not repeat activities, training or meetings that have not changed risks merely for programme continuity. Every initiative must connect to a high-risk process, a case-chain gap, or inadequate data, protection or recovery, with an outcome owner and correction indicator.

17. Selected International Comparisons: Transfer the Mechanism, Not the State

17.1 Hong Kong: Prevention, Investigation and Education in One System

The value of Hong Kong's Independent Commission Against Corruption lies in its three-pronged logic: law enforcement, corruption prevention through systems and procedures review, and community education. Iraq's lesson is not to copy the institution or its powers, but to reject separation between cases and processes. Investigation shows prevention where gaps lie; prevention reduces cases requiring investigation; public communication explains the route and makes reporting more feasible.¹⁴

What should not transfer is the legal and political context, institutional scale or public-service system. Iraq must distribute functions under its Constitution and existing bodies. If prevention already legally belongs to the Commission of Integrity and internal controls, the aim is regular, data- and case-linked reviews of high-risk procedures, not an Iraqi replica under a new name.

17.2 South Korea: Electronic Procurement as a Data Cycle, Not an Announcement Portal

Korea's KONEPS demonstrates the benefits of electronic integration across procurement and data exchange, while bid-pattern analysis identifies signals requiring further examination. The lesson is that value does not come from a “platform” itself, but from unified contract identifiers, linked stages, reduced repeated entry, recorded changes and reviewable data. Analytical signals neither replace investigation nor prove collusion.¹⁵

17.3 Georgia: Service Simplification Can Reduce Petty Corruption

Georgia's experience documents how rebuilding public services, simplifying pathways, clarifying requirements and reducing friction points can reduce petty-bribery opportunities. This intersects with effective government: lengthy, opaque procedures can create a market for intermediaries. Yet Georgia's radical reforms in its own institutional context cannot automatically transfer to a larger, more complex federal Iraq. The transferable mechanism is service redesign and measurement, not an untested institutional shock.¹⁶

17.4 A Cautionary Lesson: Independence and Digitisation Need Safeguards Against Reversal

Comparative experience shows strong agencies may weaken when independence, financing or appointment rules change, and digital systems may become constraints when monopolised by suppliers or designed without transparency. The Vision therefore links reform to continuity safeguards: clear powers, professional financing, performance accountability, non-interference in cases, portable data standards and supplier exit plans. The lesson is not to fear power or technology, but to constrain their capture.

18. Iraq Vision 2045: A State Where Corruption Is Harder and Correction Faster

In 2045, integrity is not measured by an absence of cases, which may mean weak detection. The intended state makes public processes visible: contracts have one identifier, change histories and responsibility owners; administrative decisions have bases and explanations; conflicts are disclosed and managed; financial disclosures undergo risk-based verification; whistleblowers can access safe channels; and audit findings have correction deadlines and closure after verification.

Measurement culture within anti-corruption bodies also changes. Bodies are rewarded not for press statements or detainee counts, but for quality of case progression, reasonable time, judgment enforcement, actual recovery, reduced recurrence and high-risk processes redesigned. If reporting rises alongside trust in channels, it is interpreted as a signal needing explanation, not automatic proof of greater corruption.

In contracting, core information becomes available at the time and in the form needed for oversight, and amendments and payments become part of the contract record. In employment, professional pathways are protected from sale and barter, with sensitive posts subject to proportionate controls. In public finance, auditors can connect commitments, payments and outcomes. In recovery, the state knows what was frozen, ordered recovered and actually returned, without conflating them.

This state does not eliminate discretion; it makes discretion accountable. It does not wage permanent war on employees in integrity's name, but designs decisions so professionals can act lawfully in good faith without unreasonable fear, while remaining auditable. The ultimate aim is not a state afraid of corruption, but one that understands and manages its risks and learns from every case.

19. Transformation Phases, 2027–2045, and Conditions for Progression

Source: Prepared by the Iraq Vision 2045 team, drawing on the evidence file | Data year: 2026

The state does not advance merely because a new year begins. Progression depends on functioning mechanisms. If report, case and recovery definitions are not unified by 2030, expanded analytics will base decisions on incomparable data. Without trusted whistleblower protection, digital channels will not produce good information. Without finding closure, risk maps become more reports. Progression conditions therefore operate as quality gates, not ceremonial dates.

20. Indicators and Targets: Measuring Functions, Not Manufacturing Cosmetic Numbers

The Vision rejects a new composite national “state integrity” index before stable data series exist. It requires a focused dashboard by function, with each indicator's definition, owner, frequency and source known. Where baselines are missing, numerical targets are not fixed before the 2027 baseline. Design targets may be set, such as a unified dictionary or risk maps for the highest-risk functions, but not converted into arbitrary percentages.

Source: Evidence File V1-D02-C05, methodologically aligned with the Operational Guide | Data year: 2026 | Methodological note: quantitative targets are fixed after the 2027 baseline where one is absent.

Case or arrest counts alone do not lead the dashboard. They may be operational data, but interpretation is complex. More cases may mean better detection; fewer may mean prevention improved or reporting weakened. Stronger indicators connect cases to the system: how many progressed lawfully and with quality, what effect did they have on recovery and process reform, and did the defect recur?

21. Implementation Programmes: Turning the Integrity System into Manageable Functions

Vision 2045 needs neither dozens of parallel programmes nor a new agency for every problem. Its implementation logic groups prevention, detection, accountability and correction tools into a limited set of national programmes, assigning functions to existing institutions where they already hold the mandate. A programme is not a publicity label, but a package with a defined problem, outcome owner, legal basis, indicator, risks and success conditions.

The proposed package does not create a “system above the system”. The Federal Commission of Integrity, Federal Board of Supreme Audit, judiciary, ministries and financial bodies retain their mandates. The Vision makes their interfaces traceable, links prevention to oversight and investigation findings, links cases to reform of enabling systems, and measures whether risk recurrence falls.

Source: Prepared by the Iraq Vision 2045 team, drawing on Evidence File V1-D02-C05 | Data year: 2026 | Methodological note: final powers are specified in implementation designs under current law.

21.1 Integrity by Design and Corruption Risk Management Programme

This programme is the preventive backbone. It inventories processes combining substantial funds, broad discretion, frequent direct interaction, extensive exceptions or amendable data, then maps decision pathways and tests where one person or a small group can control the whole cycle. Remedies may separate powers, remove steps, add verification, constrain exceptions, turn decisions into published criteria or create digital trails. No single tool suits every process.

Cases and audit findings must inform risk maps. When corruption methods recur in contracts, appointments or payments, moving people is insufficient; the process is retested. Every preventive amendment needs an impact test: did it reduce risk or merely lengthen service time? Linking integrity and efficiency prevents anti-corruption from paralysing the government built in the preceding chapter.

21.2 Traceable Public Contracts Programme

The programme focuses on the contract cycle, not only the award portal. It begins with planning, need and allocation, then notice, evaluation, award, contract, amendment, payment, progress and handover. The first 2027–2030 objective is a unified contract identity, core fields and clear data-quality responsibility. Automated analysis and comparisons across sectors, suppliers and time can then expand.

“Published contract count” is not a sufficient indicator. A contract is traceable when auditors or outcome owners can reconstruct events, decision-makers, price or scope changes and the connection between payments and progress. Legal exceptions remain possible but must be reasoned, recorded and reviewable: banning all exceptions may obstruct legitimate cases, while leaving them untraceable enables circumvention.

21.3 Conflicts of Interest, Disclosure and Verification Programme

The programme joins three inseparable layers: identifying relevant interests, managing conflicts with decisions and verifying financial disclosures by risk. Success is not more forms, but the ability to detect situations requiring recusal before decisions, discrepancies needing explanations or official–contractor connections needing examination. Necessary lawful data scope must therefore be defined, access restricted and privacy protected.

Where an appropriate legal basis for beneficial ownership exists, it may be linked to contract and interest decisions, but technical ease does not justify unrestricted access. System design balances oversight needs, privacy and legitimate commercial confidentiality, recording who accessed information and why. Data then become prevention and investigation tools rather than another repository of risks.

21.4 Protected Reporting and Trust in Channels Programme

Opening a phone line or email address is insufficient. Good channels define recipients, classification, separation from accused management where needed, identity protection, when reporters receive legally permissible updates, and responsibility for workplace-retaliation follow-up. They also need anonymous-reporting routes where law and procedure permit, with triage standards that do not automatically discard information because no name is given.

The state must protect employees refusing unlawful orders or reporting in good faith without immunising legally proven malicious reporting. The distinction matters: an inaccurate good-faith report may contain information that was not substantiated; a malicious report deliberately seeks harm. Confusing them intimidates reporters and makes channels merely formal.

21.5 Case-Chain Register, Financial Investigation and Asset Recovery Programme

The programme does not merge investigative and judicial authorities into one body; it unifies language and lawful data links. Every case has an identifier, timeline, transition type and closure or referral reason, separating operational and confidential information. Financial assets are recorded by clear legal stage: suspected, frozen, seized, confiscated, ordered recovered or actually returned to the state.

The register reveals bottlenecks without interfering in investigative or judicial independence. Accumulation at one stage prompts examination of causes: missing expertise, judicial-assistance requests, unknown addresses, incomplete evidence, enforcement delays or disputes. Indicators do not decide cases; they reveal where time is lost and whether the system can learn.

21.6 Closing Audit Findings and Preventing Recurrence Programme

An audit finding is not the end of the work. This programme assigns every significant finding a correction owner, deadline, root-cause remedy, independent verification evidence and later retesting for recurring risks. Classifications must distinguish financial findings, control weaknesses, waste, violations and suspected corruption, because remedies and responsible bodies differ.

Over time, recurrence becomes more important than finding volume. An institution with many findings that closes them and prevents recurrence may be learning better than one with few findings because it is poorly examined. Indicators must therefore be paired with audit scope and quality, not used to classify ministries politically without context.

21.7 Integrity in Public Employment and Sensitive Positions Programme

The programme targets appointments, promotions, transfers, rewards, allocation of authority and access to data, money and contracts. High-risk roles do not require stigmatising staff, but stronger controls: considered rotation where suitable, carefully managed leave and access, separation of powers, wealth and interest reviews where legally required, and audits of unusual patterns. Merit and professional neutrality remain the foundation of continuity.

Political leadership sets priorities and makes decisions authorised by the Constitution and law. The professional apparatus must not become spoils redistributed with every government. Protecting this boundary improves performance and integrity together, reducing networks' ability to turn jobs into currency for loyalty, financing or influence.

22. Implementation, Cost and Financing Matrix

Implementation begins with existing institutions, not another layer. Lead bodies below are functionally closest to outcomes, while courts retain independence and final powers remain subject to current laws. Required legislative or regulatory changes are identified in implementation design; administrative decisions are not assumed capable of overriding law.

Source: Prepared by the Iraq Vision 2045 team, drawing on the evidence file and limited legal verification | Data year: 2026 | Methodological note: costs are qualitative; detailed financial estimates are prepared in 2027 implementation studies.

The evidence file contains no defensible unified financial cost for programmes of this scale, so the Vision supplies no token figures. Phase one must begin with costing studies separating establishment from annual operation, technology from training, protection from investigation, and security from maintenance and change management. Transition costs, not just system purchase, must also be counted: data cleansing and integration, user training, migration of existing contracts, technical support and continuity testing.

Public financing is the default because integrity functions' independence should not depend on a donor. International technical assistance may fund training, design, knowledge exchange or technical components under clear conditions, but core registers, protection, investigation and oversight must be sustainable from Iraq's budget. Financing arguments must not rely on unproven immediate savings: less corruption may yield substantial savings, but their timing and magnitude require measurement rather than assumption.

For digital systems, sound financial management means purchasing sustainability: state ownership of data, open standards where possible, documented interfaces, export and migration rights, clear service and maintenance terms, and security and recovery tests. The cheapest offer may cost more over time if it locks the state to one supplier or prevents data extraction.

23. Risk Register: Preventing Anti-Corruption from Becoming a New Problem

This chapter's gravest risks are institutional and rights-related rather than technical. A strong anti-corruption body can be used selectively; intensive oversight can paralyse employees; transparency platforms can publish meaningless data; and digital analysis can give suspicion a false scientific appearance. The Vision therefore measures reform by its ability to reduce these risks too, not by tools added.

Source: Prepared by the Iraq Vision 2045 team, drawing on the evidence file | Data year: 2026 | Methodological note: likelihood and impact are qualitative assessments requiring regular updates.

The risk register must not become a static annual document. It is reviewed against cases, findings, user experience and new events. Risks that materialise despite controls reorder priorities. Reduced risks are not automatically removed; lighter monitoring may be appropriate. This cycle enables the integrity system to learn rather than repeat the same plans.

24. Constitutional and Rights Safeguards: A State of Integrity Cannot Be Built by Corrupting the Rule of Law

Anti-corruption commands strong legitimacy and can therefore become dangerous when used to justify bypassing rules. Building on “The Rule of Law and Institutional Justice”, this chapter affirms that the presumption of innocence, defence rights, fair trials, judicial independence, appeal rights and equality before the law are not barriers to integrity; they distinguish accountability from revenge.¹⁷

The first safeguard distinguishes suspicion from conviction. A red flag, audit report, wealth discrepancy, report or investigation order alone does not prove a crime. Each stage serves a different function. State language in statements and reports must reflect this distinction so accusation does not become social punishment before judgment.

The second protects professional employees making lawful, good-faith decisions on available information. Administration cannot work if every judgment can be retrospectively criminalised because its outcome failed. Administrative and professional accountability remain, but crimes require their legal elements. This boundary prevents oversight from producing an apparatus that refuses decisions and seeks a superior's signature at every step.

The third protects privacy and investigation secrecy. Financial disclosure, contract data, company information and relationship analysis are powerful tools, but do not confer unrestricted rights to publish personal data. Law defines purpose, access, retention and duration; data use and reasons are recorded; and automated or semi-automated decisions receive human review.

The fourth prohibits using integrity bodies against opposition, journalism or legitimate criticism. Investigative journalists and civil society may use data, ask questions and identify risk signals under the law. The state does not punish questions; it punishes proven crimes. Conversely, the media cannot declare criminal guilt in place of courts.

The fifth is equality and non-selectivity. A system punishing opponents while sparing allies causes the same harm as corruption: it turns general rules into private instruments. Institutions therefore need internally published triage and referral standards, anonymised statistics permitting pattern review, and mechanisms for redress and accountability for abuse of authority.

25. Chapter Boundaries: What Is Addressed Here and What Belongs Elsewhere

This chapter does not repeat state theory from V1-D02-C01, sovereignty and organised force from V1-D02-C02, judicial structures and access to justice from V1-D02-C03, or performance machinery, digital services and project management from V1-D02-C04. It uses their established conclusions from one perspective: protecting public capacity from private capture and making integrity part of administrative and oversight design.

Nor does it anticipate Part Three's treatment of corruption in defence, security or military procurement. Sensitive sectors need specialised integrity systems appropriate to secrecy and risks, but detail belongs in the security and defence parts. It does not become banking, tax, public-enterprise or competition-policy reform either; those sectors appear only where data, recovery, ownership or public money directly connect to integrity functions.

Technology here is an administrative and oversight tool: contract records, audit trails, red-flag analysis and lawful data linkage. National data sovereignty, AI infrastructure and national cybersecurity belong later. The preceding chapter's principle remains: do not digitise defects or give algorithms accusatory authority; use technology to reduce opacity and improve traceability with human review.

26. Conclusion to Part Two: From Building the State to Protecting Its Capacity

Part Two began by asking which institution assembles public capacity and endures above governments, parties and individuals. “The State First” established the state as the enduring constitutional and institutional framework, and Iraq as an existing state with uneven capacities needing strengthening, unification and sustainability. “Sovereignty and the Monopoly of Decision-Making” then addressed final authority: a state is incomplete if a parallel power can issue overriding public decisions outside the constitutional system.

Yet a monopoly of decisions and force was insufficient. “The Rule of Law and Institutional Justice” subjected capacity itself to general rules, independent review, rights and fair procedure. Once authority was legally constrained, “Effective Government” answered the daily question: how do policy, law and budgets become services, projects and outcomes, who owns those outcomes, and how are deviations measured and corrected?

This chapter adds the final link: public capacity is itself a valuable resource vulnerable to capture. If influential actors can turn contracts, jobs, decisions, information or oversight into private benefit, the state may become more effective at producing the wrong outcomes. Integrity is therefore not peripheral oversight; it is a design constraint within authority, money and procedures, and a chain beginning with prevention and ending only with recovery of effects and system correction.

Part Two's logic is thus complete: the state answers “Who holds public capacity?”; sovereignty asks “Where does final authority remain?”; the rule of law asks “What constrains that authority?”; effective government asks “How does authority become an outcome?”; and anti-corruption asks “How do we prevent capacity and outcomes becoming private property?”

Anti-corruption is a condition of survival not because every corrupt act immediately collapses the state, but because systemic corruption changes the state's function: loyalty shifts from rules to networks, money from public to private benefit, jobs from service to privilege, and contracts from implementation tools to distributable resources. When the state prevents, penalises and remedies this transformation and corrects its causes, it protects capacity, not merely its image.

27. Bridge to Part Three: Security as a Condition for National Renewal

After building a capable state with decision-making authority, legal constraints, effective implementation and an integrity system, another existential question remains: can it protect the environment in which it operates? There is no economy without stability, investment without security, or functioning institutions if the state cannot protect society, sovereignty, infrastructure and the economy from violence, threats and shocks.

This opens Part Three without conflating security with integrity or making force a substitute for law. Part Two remains a constraint on Part Three: security forces belong to the state and are subject to sovereignty, law, oversight and integrity, measured by their ability to protect the public sphere rather than extend power beyond their purpose.

References

Republic of Iraq. Constitution of the Republic of Iraq, 2005, particularly Articles 14, 19, 47, 87, 88, 100, 102 and 103.

Republic of Iraq. Federal Commission of Integrity and Illicit Enrichment Law No. 30 of 2011, amended by Law No. 30 of 2019.

Republic of Iraq. Federal Board of Supreme Audit Law No. 31 of 2011, as amended.

Republic of Iraq. Federal Financial Management Law No. 6 of 2019, amended by Law No. 4 of 2020.

Republic of Iraq. Law No. 58 of 2017 on the Protection of Witnesses, Experts, Informants and Victims.

Iraqi Ministry of Planning. Public Contracts Implementation Instructions No. 1 of 2025 and published implementing controls and circulars, 2025–2026.

Iraqi Council of Representatives. Legislative-process record for the draft Right to Access Information Law, first and second readings, 2024.

Federal Commission of Integrity. Official materials and reports concerning the Integrity and Anti-Corruption Strategy 2025–2030, 2025–2026.

Transparency International. Corruption Perceptions Index 2025: Iraq country result and methodology.

United Nations. United Nations Convention against Corruption (UNCAC), 2003, and implementation-review materials used in the evidence file.

World Bank and UNODC. Stolen Asset Recovery Initiative (StAR): asset recovery guidance and references used for the recovery framework.

Arab Barometer. Iraq Wave V and subsequent Iraq materials used in the project evidence for perceptions of wasta, bribery, trust and public services.

OECD. Public integrity and public procurement materials used for conflict-of-interest, risk management, procurement data and KONEPS comparisons.

Independent Commission Against Corruption, Hong Kong. Official materials on the three-pronged strategy of enforcement, prevention and community education.

World Bank. Fighting Corruption in Public Services: Chronicling Georgia’s Reforms. Washington, DC, 2012.

Iraq Vision 2045. V1-D02-C01 “The State First”, final version 1.0 and evidence file.

Iraq Vision 2045. V1-D02-C02 “Sovereignty and the Monopoly of Decision-Making”, final version 1.0 and evidence file.

Iraq Vision 2045. V1-D02-C03 “The Rule of Law and Institutional Justice”, final version 1.0 and evidence file.

Iraq Vision 2045. V1-D02-C04 “Effective Government”, final version 1.0 and evidence file.

Iraq Vision 2045. V1-D02-C05 “Evidence, Analysis, Sources and Proposed Targets File — Fighting Corruption as a Condition of Survival”, 2026.

Iraq Vision 2045. Current Operational Guide, updated official index and internal data decisions, 2026.