ISO 14001 checklist: every requirement in the order you will meet it, with the evidence auditors look for

Clause 4: Context of the organisation

Begin by agreeing what shapes your environmental risk, who has a stake in it and where the boundary of the system runs. Every later register depends on that boundary.

• The internal and external issues that affect your environmental performance are identified, including environmental conditions such as climate, natural resources, pollution levels and biodiversity where they bear on your activities. Evidence: a dated context review that has been revisited at least once.
• A decision on whether climate change is a relevant issue for you is recorded, with the reasoning behind it. Evidence: the conclusion and its basis, normally held with the context review.
• The interested parties that matter to the system, such as regulators, neighbours, customers, the parent company and insurers, are listed with the requirements of theirs you have decided to meet. Evidence: a parties register that shows which requirements have become compliance obligations.
• The scope is written: the sites, activities, products and services and boundaries covered. Evidence: a scope statement that matches the certification application and what the auditor will see on site.
• The processes that make up the system, and how they connect, are established and assigned to owners. Evidence: a process overview naming the owner, inputs, outputs and records of each process.

ISO 14001 scope: sites, activities and the mistakes that cost you

Clause 5: Leadership

These items describe what top management does and can explain in interview, so work through them with top management present rather than for them.

• Top management takes accountability for the system and can describe the significant aspects, the key compliance obligations and current environmental results in its own words. Evidence: interviews, and minutes where environmental performance is discussed and decided.
• Environmental requirements are built into business decisions such as capital spending, purchasing, new products and site changes, and the system receives the resources it needs. Evidence: budgets or approvals that show environmental needs being funded.
• An environmental policy is approved that commits to protecting the environment, meeting compliance obligations and improving continually, and gives a frame for objectives. Evidence: the signed policy, how it was communicated and where interested parties can obtain it.
• Environmental responsibilities and authorities are assigned at each site and understood by the people who hold them, including who reports on performance to top management. Evidence: role descriptions and an organisation chart that match practice.
• Site and function managers can show how they support the system in their own area. Evidence: local objectives, toolbox talks or inspections led by line managers.

Clause 6: Planning

Planning is the heart of an environmental system and the slowest part to do properly. The 2026 edition gives risks and opportunities their own sub-clause (6.1.4) and adds a separate requirement to plan changes (6.3), so check these items even if you already hold a 2015 certificate.

• Environmental aspects are identified for every activity, product and service in scope, under normal, abnormal and emergency conditions, including those you influence rather than control. Evidence: an aspects register built by walking each site and process, not copied from a template.
• A life cycle perspective is applied, looking at stages such as raw material purchase, transport, use and end-of-life treatment where you can influence them. Evidence: register entries that reach beyond the site fence, with the reasoning recorded.
• Criteria for deciding which aspects are significant are defined and applied consistently, and the significant aspects are recorded. Evidence: scoring criteria and a register in which each significance decision can be traced to them.
• The register is updated when activities, materials, equipment or sites change. Evidence: a revision history linked to real changes.
• Compliance obligations are identified for each site: permits, licences, laws, regulations and the voluntary commitments you have accepted, with the conditions that apply to your aspects. Evidence: a legal register by site listing permit conditions, limits and renewal dates, with a named person keeping it current.
• Potential emergency situations with an environmental impact are identified at the planning stage, such as spills, fires, releases and flooding. Evidence: a list of credible scenarios linked to the aspects register.
• Risks and opportunities arising from context, interested parties, aspects and obligations are determined, and actions are planned and built into processes. Evidence: a register with owners, actions, review dates and results.
• Environmental objectives are set at relevant functions and levels, take the significant aspects and compliance obligations into account, and are measurable and monitored. Evidence: each objective with a baseline, a target, a date and the latest result.
• Each objective has a plan: what will be done, the resources, who is responsible, when it will be complete and how results will be evaluated. Evidence: action plans with progress recorded against them.
• Changes relevant to the system, such as a new process, material, supplier or site, are planned before they go live. Evidence: a change record showing the environmental review carried out before implementation.

Environmental aspects and impacts: building the register

Compliance obligations and the legal register, site by site

Clause 7: Support

Support is what the system runs on. Competence records for the people whose work can cause a significant impact are among the first things an auditor samples.

• The resources the system needs, including people, equipment, spill kits, containment and monitoring budget, are determined and provided. Evidence: resource decisions and maintenance records for environmental equipment.
• The competence required for roles that can cause a significant impact or affect compliance is defined, such as chemical handlers, waste operators, effluent plant staff and the environmental lead. Evidence: a competence matrix covering education, training and experience.
• People in those roles, contractors included, are competent and the proof is on file, with the effectiveness of any training evaluated. Evidence: current competence records for the people the auditor chooses, and evaluations after training.
• Everyone working under your control is aware of the policy, the significant aspects linked to their work, their contribution and what happens if they do not follow requirements, including a breach of compliance obligations. Evidence: induction and briefing records, and people who can explain these points on the shop floor.
• Internal communication about the system is planned: what, when, with whom and how. Evidence: a communication matrix and examples of it in use.
• External communication is planned, including what regulators require you to report and how you respond to neighbours and the community. Evidence: regulatory submissions and a log of external enquiries or complaints with the replies sent.
• Documents such as the policy, registers, procedures and emergency plans are identified, approved before issue and version controlled. Evidence: a document register with owners and current versions.
• Documents are available where work happens, external documents such as permits and safety data sheets are controlled, and records are protected and kept for set periods. Evidence: current versions at the point of use, a list of external documents and retention periods.

Clause 8: Operation

Operation is where the auditor leaves the meeting room. Expect to be walked to the chemical store, the waste yard, the effluent plant and the boundary, and to be asked for records made during normal work.

• Operating criteria are set for each process linked to a significant aspect, such as waste segregation, chemical storage, effluent treatment and emission control, and are followed. Evidence: work instructions at the point of use, inspection checklists and site conditions that match them.
• Physical controls the aspects assessment calls for, such as bunding, drip trays and segregated storage, are in place and inspected. Evidence: inspection records and photographs of the controls.
• Externally provided processes, products and services that can affect your environmental performance, including contractors, waste carriers and laboratories, are identified and controlled. Evidence: a list of providers with their controls, current licences for waste carriers and disposal sites, and waste manifests.
• Environmental requirements are passed to suppliers and contractors before work starts, and contractors working on site are briefed. Evidence: purchase specifications, contract clauses and contractor induction records.
• A life cycle perspective shows in operations: environmental requirements in design or development where relevant, in purchasing, and information supplied on the transport, use and end-of-life treatment of your products. Evidence: design reviews, purchase criteria or product information that address environmental points.
• Emergency response plans cover the environmental scenarios identified in planning, not only safety. Evidence: plans with spill, fire water and release responses, and the equipment to carry them out.
• Planned responses are tested by drill where practicable, and plans are revised after drills and real incidents. Evidence: drill records with observations and the changes made as a result.
• People and relevant outside parties, such as contractors and neighbouring sites, know their part in an emergency. Evidence: training records and communications to those parties.

Clause 9: Performance evaluation

Clause 9 needs a system that has been running for some months. Most of its items carry double weight, because a monitoring gap or a missing compliance evaluation cannot be fixed in the week before the audit.

• What is monitored and measured is defined, with methods, frequencies, criteria and indicators for environmental performance. Evidence: a monitoring plan covering emissions, effluent, waste, energy and water as they apply.
• Monitoring equipment is calibrated or verified, and results are compared with permit limits and your own criteria. Evidence: calibration records for the meters behind the data, laboratory reports and trend charts against limits.
• Monitoring data held by a contractor or laboratory is received, reviewed and acted on by you. Evidence: reports on file with a named reviewer and the actions taken on any exceedance.
• Fulfilment of compliance obligations is evaluated at a planned frequency, the result is recorded and action is taken where you fall short. Evidence: a completed compliance evaluation for each site, with its date, findings and follow-up.
• Environmental performance information is communicated internally and externally as your communication plan and obligations require. Evidence: performance reports, notice boards or submissions to regulators and customers.
• An internal audit programme covers the whole scope, with objectives, criteria and scope defined for each audit, as the 2026 edition requires. Evidence: the programme, audit plans and a schedule showing every site and requirement covered.
• At least one full internal audit cycle is complete before the certification audit, by auditors who are not auditing their own work, with findings reported and acted on. Evidence: reports, auditor competence records and findings closed or planned with dates.
• Top management has reviewed the system with the required inputs, such as changes in context, obligations and significant aspects, performance against objectives, compliance evaluation results, audit results and complaints. Evidence: an agenda and review pack addressing each input.
• The review ended in decisions on improvement, changes to the system and resources, each with an owner and a date. Evidence: minutes with decisions, and actions tracked to closure.

ISO 14001 internal audit: planning, conduct and reporting

ISO 14001 management review: inputs, outputs and the record

Clause 10: Improvement

The 2026 edition places continual improvement first in clause 10 and nonconformity second. Here nonconformity comes first because it should be working from the first weeks, when exceedances, spills and complaints start to be recorded.

• Each nonconformity, including exceedances, spills, complaints and audit findings, is controlled and corrected, and its environmental consequences are dealt with. Evidence: a nonconformity log showing the immediate response to each entry.
• The cause of each significant nonconformity is found, similar cases are checked, and corrective action is implemented and reviewed for effect. Evidence: root-cause analysis and a closure record showing the cause was removed.
• Registers and plans are updated when a nonconformity reveals a missed aspect, obligation or risk. Evidence: register revisions that point back to the nonconformity.
• Continual improvement of environmental performance is visible, drawing on analysis and management review decisions. Evidence: trends that show objectives being met and improvement projects with results.