Knowledge base

ISO 14001:2015: Documentation and Compliance Requirements

This guide explains, clause by clause, what ISO 14001:2015 expects an organisation to have in place and what an auditor may ask to see as evidence.

Prem Kumar Dvivedi · September 12, 2026

It covers the requirements from Clauses 4 to 10 and focuses on what needs to be done, documented and demonstrated, rather than simply asking whether a document exists.

1. Understanding the Organisation and Its Context

Clauses 4.1, 4.2, 4.3 and 4.4

Understanding external issues

The organisation must identify external factors that can affect its environmental performance, such as:

• Environmental laws and regulations

• Weather and climate conditions

• Local community concerns

• Customer requirements

• Availability of materials and resources

Evidence: A documented list or table of these issues, including the date of the latest review.

Understanding internal issues

The organisation must also identify internal factors that may affect its environmental performance, including:

• Equipment and machinery

• Buildings and facilities

• Employee skills and knowledge

• Financial resources

• Internal processes and working methods

Evidence: A documented list covering relevant internal issues.

Considering climate change

The organisation must consider:

• How climate change could affect its operations

• How its own activities may contribute to climate change

This may include risks such as flooding, extreme heat, water shortages, storms and greenhouse gas emissions.

Evidence: A documented assessment or decision showing that climate change has been considered.

Identifying interested parties

The organisation must identify people and organisations that have an interest in its environmental performance, such as:

• Government and regulators

• Customers

• Employees

• Neighbours and local communities

• Landlords

• Insurance companies

Evidence: A list of relevant interested parties.

Understanding their requirements

The organisation must identify what these interested parties expect and decide which requirements it must comply with.

Requirements that the organisation accepts as mandatory become compliance obligations.

Evidence: A record showing interested parties, their expectations and the requirements the organisation has accepted.

Defining the EMS scope

The organisation must clearly define what its Environmental Management System (EMS) covers, including:

• Locations and sites

• Activities

• Products

• Services

Evidence: A documented scope statement, supported where appropriate by site plans or boundaries.

The scope should cover activities that can have significant environmental impacts. The organisation should not exclude activities simply to avoid addressing environmental issues.

Evidence: Documented justification for the scope and its boundaries.

Identifying processes

The organisation must understand its main processes and how they work together.

Evidence: A process map or list of processes, including responsible persons where appropriate.

________________________________________

2. Leadership

Clauses 5.1, 5.2 and 5.3

Top management involvement

Top management must demonstrate that they are actively involved in environmental management and have made relevant environmental decisions.

Evidence: Management review records, approved budgets, improvement decisions or other documented management actions.

Providing resources

Senior management must provide the necessary:

• People

• Time

• Money

• Equipment

• Other resources

needed to operate the EMS effectively.

Evidence: Budgets, staffing records, equipment purchases or approved resource requests.

Environmental policy

The organisation must have a documented environmental policy that is appropriate to its:

• Size

• Activities

• Products and services

• Environmental impacts

Evidence: An approved, signed or otherwise authorised environmental policy.

What the policy must include

The environmental policy must include commitments to:

1. Protect the environment and prevent pollution

2. Meet applicable compliance obligations

3. Continually improve the environmental management system and environmental performance

Evidence: All three commitments should be clearly included in the policy.

Communicating the policy

The environmental policy must be communicated to employees and made available to relevant interested parties.

Evidence: Policy displayed at the workplace, shared electronically or published externally.

Employees should also be able to demonstrate awareness of the policy.

Roles and responsibilities

The organisation must clearly define who is responsible for environmental activities, including emergency responsibilities.

Evidence: Organisation chart, responsibility matrix, job descriptions, emergency contact lists and assigned roles.

________________________________________

3. Planning – Environmental Impacts, Legal Requirements and Objectives

Clauses 6.1.1, 6.1.2, 6.1.3, 6.1.4, 6.2.1 and 6.2.2

Risks and opportunities

The organisation must identify environmental risks and opportunities that could affect its EMS or environmental performance.

Evidence: A documented risk and opportunity assessment linked to the organisation's context and interested parties.

Identifying environmental aspects

The organisation must identify how its activities, products and services interact with the environment.

This may include:

• Waste

• Air emissions

• Water consumption

• Energy use

• Wastewater and discharges

• Use of raw materials

• Land use

Evidence: An environmental aspects and impacts register covering relevant activities and locations.

Abnormal conditions and emergencies

The assessment must also consider situations outside normal operations, such as:

• Start-up and shutdown

• Equipment breakdown

• Chemical spills

• Fire

• Accidents

• Other emergency situations

Evidence: Environmental aspects identified for normal, abnormal and emergency conditions.

Life-cycle perspective

The organisation must consider environmental impacts throughout the relevant life cycle of its products or services, including:

• Purchasing

• Design

• Production

• Transportation

• Use

• Disposal

A complete formal life-cycle assessment is not necessarily required.

Evidence: Records showing that relevant life-cycle stages were considered when making decisions.

Determining significant environmental aspects

The organisation must decide which environmental aspects are significant using defined criteria.

Evidence: Documented evaluation criteria, identified significant aspects and reasons for their classification.

Legal and other requirements

The organisation must identify the environmental laws, regulations, permits and other requirements that apply to its activities.

It must also have a method for keeping this information updated.

Evidence: Legal and compliance register, permits, licences, approval documents and evidence of regulatory updates.

Communicating legal requirements

Employees and other relevant persons who need to follow environmental requirements must be made aware of them.

Evidence: Training records, work instructions, awareness sessions and workplace communication.

Planning actions

The organisation must plan actions to address:

• Significant environmental aspects

• Compliance obligations

• Environmental risks and opportunities

Evidence: Action plans linking environmental issues to specific controls or actions.

These actions should be integrated into normal business processes rather than kept only in a separate action list.

Evidence: Procedures, work instructions and operational controls that include the required actions.

Environmental objectives

The organisation must establish environmental objectives that can be measured where practical.

For example, instead of saying "Reduce environmental impact," a measurable objective could be "Reduce electricity consumption by 10% within one year."

Evidence: Objectives containing a baseline, target, measurement unit and timeframe.

Action plans for objectives

For each objective, the organisation should clearly define:

• What needs to be done

• Who is responsible

• When it must be completed

• What resources are required

• How the results will be measured

Evidence: Objective action plans and progress records.

________________________________________

4. Support – People, Communication and Documents

Clauses 7.1, 7.2, 7.3, 7.4.1, 7.4.2, 7.4.3, 7.5.1, 7.5.2 and 7.5.3

Providing resources

The organisation must provide the resources required to operate and maintain the EMS.

This may include:

• Employees

• Budget

• Equipment

• Monitoring instruments

• Systems and infrastructure

Evidence: Staffing records, budgets, equipment records and monitoring resources.

Competence

The organisation must identify the skills and knowledge required for environmentally important jobs and ensure that people performing those jobs are competent.

Evidence: Training records, competency assessments, skills matrices and legally required licences.

Contractor competence

Contractors carrying out environmentally significant activities must also be suitably competent.

Evidence: Contractor evaluations, licences, qualifications and competency records.

Employee awareness

Employees should understand:

• The environmental policy

• The environmental impacts of their work

• Their responsibilities

• What could happen if environmental requirements are not followed

Evidence: Induction records, training, toolbox talks, signs and employee interviews.

Environmental communication

The organisation must decide:

• What environmental information needs to be communicated

• Who needs to receive it

• When it needs to be communicated

• Who is responsible for communication

Evidence: Communication plan, communication matrix or similar documented arrangement.

Employee suggestions and reporting

Employees should have a way to:

• Report environmental problems

• Raise concerns

• Suggest improvements

Evidence: Suggestion systems, reporting channels and records showing that issues were addressed.

Complaints and external communication

The organisation must appropriately handle environmental enquiries and complaints from:

• Customers

• Regulators

• Neighbours

• Other interested parties

Evidence: Complaint records, responses, correspondence and regulatory communication.

Documented information

The organisation must maintain the documented information required by ISO 14001 and any additional documents needed for effective operation of the EMS.

Evidence: Document and record register.

Document approval

New documents and changes to existing documents must be reviewed and approved before use.

Evidence: Signatures, approval records, electronic system approvals or version-control information.

Document control

Employees must have access to the latest approved documents where they are needed.

Old or obsolete versions must be controlled so they are not accidentally used.

Evidence: Document-control procedure, revision history and removal of obsolete documents.

Record retention

Records must be protected and retained for the required period.

Some permits or legal requirements may require records to be retained for longer periods.

Evidence: Record retention schedule and applicable legal or permit requirements.

________________________________________

5. Operation and Emergency Preparedness

Clauses 8.1 and 8.2

Operational controls

For activities associated with significant environmental impacts, the organisation must define how the work should be performed.

This may include:

• Operating procedures

• Work instructions

• Permit requirements

• Chemical storage controls

• Spill prevention

• Waste segregation

Evidence: Procedures, instructions, permits and operational control records.

Checking operational controls

The organisation must verify that environmental controls are actually being followed.

Evidence: Inspection reports, housekeeping checks, monitoring results and operational records.

Contractors and suppliers

The organisation must control contractors and suppliers whose activities can affect environmental performance.

Evidence: Contractor induction, site rules, contract requirements and monitoring records.

Communicating environmental requirements

Relevant environmental requirements must be communicated to suppliers and contractors.

Evidence: Purchase specifications, contracts, supplier instructions and waste-management arrangements.

Life-cycle considerations in decisions

The organisation should be able to demonstrate that environmental considerations have influenced relevant decisions, such as:

• Supplier selection

• Product design

• Packaging

• Transportation

• Material selection

• Disposal

Evidence: Examples showing how environmental considerations affected a business decision.

Emergency situations

The organisation must identify possible environmental emergencies, such as:

• Chemical spills

• Fire

• Flood

• Leakage

• Loss of containment

Evidence: Emergency scenario list or environmental emergency assessment.

Emergency preparedness

The organisation must have plans, resources and equipment to respond to environmental emergencies.

Evidence: Emergency plans, spill kits, absorbent materials, containment systems, fire equipment and inspection records.

Testing emergency arrangements

Emergency response arrangements must be tested periodically.

If problems are identified during a drill or actual incident, the organisation must take appropriate action and update its arrangements where necessary.

Evidence: Emergency drill records, observations, corrective actions and updated plans.

________________________________________

6. Monitoring and Checking Performance

Clauses 9.1.1, 9.1.2, 9.2.1, 9.2.2 and 9.3

Monitoring and measurement

The organisation must decide:

• What environmental information needs to be measured

• How it will be measured

• How often it will be measured

Examples include:

• Energy consumption

• Water consumption

• Waste generation

• Emissions

• Effluent or discharge

Evidence: Monitoring and measurement plan and monitoring records.

Reliability of measurements

Monitoring and measuring equipment must provide reliable results.

Evidence: Calibration certificates, verification records and, where applicable, laboratory accreditation or competence records.

Analysing results

The organisation must review its environmental data, identify trends and take action when required.

Evidence: Trend analysis, charts, reports and actions taken based on results.

Evaluating legal compliance

The organisation must regularly check whether it is complying with the environmental laws, permits and other requirements identified in its compliance register.

Having a legal register alone is not enough. The organisation must also evaluate whether it is actually complying with those requirements.

Evidence: Compliance evaluation records showing dates, requirements checked, results and conclusions.

Dealing with non-compliance

If the organisation identifies a legal or environmental non-compliance, it must take appropriate action and maintain records.

Evidence: Non-compliance records, corrective actions, regulatory notices and correspondence.

Internal audits

The organisation must conduct internal audits to check whether its EMS:

• Meets ISO 14001 requirements

• Meets its own requirements

• Is effectively implemented and maintained

Evidence: Internal audit programme, audit plans, reports and findings.

Risk-based audit planning

The internal audit programme should consider:

• Environmental risks

• Importance of processes

• Previous audit findings

• Past problems or incidents

Evidence: Documented basis for the audit programme.

Auditor competence and independence

Internal auditors should be competent and, where practical, independent of the activities they audit.

Evidence: Auditor training, qualifications, competency records and audit assignments.

Management review

Top management must review the EMS at planned intervals.

Evidence: Management review schedule, meeting records and attendance.

The review should consider relevant information such as:

• Previous actions

• Changes in internal and external issues

• Environmental performance

• Compliance status

• Communications and complaints

• Audit results

• Resources

• Improvement opportunities

Evidence: Management review agenda and meeting records.

Management review outputs

Management review should result in decisions and actions, not simply meeting minutes.

Evidence: Action plans, assigned responsibilities, deadlines and decisions regarding improvements or resources.

________________________________________

7. Improvement and Corrective Action

Clauses 10.1, 10.2 and 10.3

Continual improvement

The organisation should continuously look for opportunities to improve its environmental performance and EMS.

Evidence: Improvement plans, completed projects and improvement records.

Handling incidents and problems

When an environmental incident or non-conformity occurs, the organisation must:

• Respond to the problem

• Control the situation

• Reduce or prevent environmental impact

Evidence: Incident reports, containment records, clean-up records and corrective actions.

Finding the root cause

The organisation must determine why the problem occurred so that it can prevent recurrence.

Evidence: Root-cause analysis, such as the 5 Whys or another suitable method.

Checking for similar problems

The organisation should determine whether the same problem could occur elsewhere, such as:

• Another location

• Another machine or tank

• Another department

• Another shift

Evidence: Records showing that the organisation considered similar risks elsewhere.

Checking corrective actions

The organisation must verify whether corrective actions were effective.

Where necessary, it should update:

• Environmental aspects

• Risks and opportunities

• Procedures

• Operational controls

Evidence: Follow-up verification records and revised documents or registers.

Maintaining corrective-action records

The organisation should maintain records showing:

• What happened

• Why it happened

• What action was taken

• Whether the action was effective

Evidence: Corrective action or incident log.

Demonstrating improved environmental performance

The organisation should be able to demonstrate actual improvement, not simply show that its documentation is well maintained.

Examples include improvements in:

• Energy consumption

• Water consumption

• Waste generation

• Emissions

• Resource efficiency

Where possible, results should be measured against a suitable baseline and adjusted for changes in production or business activity.

Evidence: Performance trends, measurable improvement projects and documented results.

________________________________________

How to Use This Guide

ISO 14001:2015 does not require an organisation to create a large manual or a large collection of templates simply for the sake of documentation.

The focus is on showing that the organisation has:

• Identified its environmental issues

• Made appropriate decisions

• Implemented necessary controls

• Met its applicable obligations

• Monitored its performance

• Taken corrective action when needed

• Continued to improve

More documentation does not automatically mean better compliance.

A long procedure that employees do not follow can create a bigger problem than a simple procedure that is actually implemented.

The key question is:

Can the organisation demonstrate that its documented requirements reflect what people actually do in their day-to-day work?

For ISO 14001:2015, effective implementation is not just about having documents—it is about being able to demonstrate that the environmental management system works in practice.

What this covers

See how this looks as a working system

Reading about a requirement and seeing the documentation that satisfies it are different things. In a short demo we open the actual manual, procedures and records set for ISO 14001, show you how each clause is answered and where your existing way of working already fits. You will know what implementation involves before you commit to it.

Ask us about this

Tell us what is being asked of you and by whom.

What are you looking for?

We reply within one working day. Your details stay with our consultants.

More reading

All articles