What Are the Requirements of ISO 14001? Key Processes and Documentation

According to the ISO Survey 2024, there are over 16,000 valid ISO 14001 certificates in the UK. Globally, ISO 14001 remains one of the most widely adopted management system standards, with year-on-year growth across manufacturing, construction, and services.

If you’re not sure what is required to achieve ISO 14001 certification, this guide covers the requirements of the standard and the documented information organisations need to demonstrate conformity.

Here’s a quick overview of the requirements:

• Documented information: Environmental Management System (EMS) scope, environmental policy, records, documented procedures where necessary, audit reports, and management review outputs.
• Evidence underpinning wider requirements: Competence and training records, monitoring and measurement data, objectives and results, evaluation of compliance, internal audit findings, and corrective actions.
• Process requirements: Identification and evaluation of environmental aspects (with a life-cycle perspective), determination of compliance obligations, actions to address risks and opportunities, operational planning and control (including outsourced processes and change management), emergency preparedness and response, and continual improvement.
• Governance and leadership: Roles and responsibilities, awareness and communication (internal and external), performance evaluation (monitoring, measurement, analysis, and evaluation), internal audit programme, and management review.

Read on as we explore these in more detail.

Learn more about the ISO 14001 Standard.

ISO 14001 Key Requirements Checklist Download our free Key Requirements Checklist for ISO 14001 today. Learn More

To conform to ISO 14001, organisations must provide documented evidence that their EMS adheres to the requirements. While the standard specifies what types of documentation is necessary, (noted above), it allows flexibility in the methods employed to operate and record environmental management activities.

The primary purpose of the documentation is to evidence implementation of the standard’s requirements.

The scope defines the operational range and boundaries of an EMS, including which processes, locations, departments, or divisions are included. It also details the products and services an organisation offers and their geographical distribution, whether that be regionally, across the UK, throughout Europe, or globally.

Many organisations apply the ISO 14001 Environmental Management System to the whole organisation. The scope must reflect the organisation’s activities, products, and services that it can control or influence. Limitations must be justified and not be used to exclude requirements of the standard where they apply.

For example, a multi‑site manufacturer may include all UK production sites and distribution centres, and exclude R&D if impacts are negligible, with this reviewed annually. A services firm might include its head office and client operations, and control outsourced data centres through supplier requirements.

The environmental policy outlines an organisation’s commitment to managing its impact on the environment and adhering to legal obligations. The environmental policy should include commitments to the protection of the environment, fulfilment of compliance obligations, prevention of pollution, and continual improvement.

This should include measurable commitments, such as reducing electricity intensity by 8% against a set baseline.

Understand more about environmental policies and their benefits.

This evaluation identifies and acknowledges potential environmental risks and opportunities that may arise during operations, including abnormal and emergency situations. It should reflect a commitment to adopt changes and make environmental enhancements.

The standard does not dictate a specific risk assessment method; however, organisations might take a risk-oriented approach, and should be able to discuss methodology and provide related documents, such as strategic or operational plans.

For instance, an organisation might record the risk of refrigerant leakage from older systems, and the opportunity to replace them with alternatives, noting their reasoning and planned actions.

Environmental aspects are defined as operations that affect the environment, such as energy usage, waste production, and emissions. Identifying these aspects involves assessing their environmental impact and prioritising them using an appropriate evaluation method, such as a risk scoring system.

The method for scoring is flexible, provided it adequately assesses the likelihood and potential severity of impacts. This evaluation process should be periodically revisited to reflect any changes in an organisation’s operations.

Here are some examples of typical aspects by sector:

• Manufacturing: Electricity and gas consumption; process heat; solvent and VOC use; scrap and packaging waste. Improvements might include LED lighting, fixing compressed air leaks, and improving recycling.
• Food retail: Refrigerant leakage from HVAC and display units; electricity use for refrigeration; food waste. Improvements could include planned maintenance to cut leaks, night blinds or door curtains, and better stock rotation.
• Construction: Site run-off and silt management; dust and noise; fuel use for plant; materials waste. Improvements might include fuel management on site, silt controls, and clearer waste segregation.

Read more about creating an environmentally sustainable business.

Organisations should employ data-driven objectives, making use of outcomes from the environmental aspects’ ‘risk’ scoring to determine which activities require monitoring. Objectives should be data-driven and, where feasible, quantifiable, such as:

• Monthly electricity use in kWh
• Monthly waste tonnages
• Business miles avoided through video conferencing

The purpose of these objectives is to generate data that supports informed environmental decision-making, which can also help justify investments in more efficient assets.

After installing new assets, the collected data can help prove whether the predicted improvements have been achieved. Additionally, if a business has historical data on production output and utility consumption, objectives can be developed to calculate efficiencies, such as the number of products per kWh consumed.

If considering investments in solar PV, battery electric delivery vans, LED lighting, or new motors and pumps, focus objectives on gathering data to support these business cases.

Discover innovative strategies for waste reduction with ISO 14001.

Organisations should clearly define who is responsible for each objective and establish methods for monitoring progress. They should identify any specialised equipment or services required and set timelines for achievement.

For example, an organisation might decide to capture data monthly, review quarterly, and note any exceptions, such as a variance greater than 5% against plan.

The ISO 14001 standard mandates that appropriate operational controls are implemented to address environmental aspects, ensuring that both legal requirements and environmental objectives are met. Organisations must determine and retain documented information necessary to ensure operational controls meet applicable legal and compliance obligations.

Control may also be needed to clearly define internal, external, and outsourced processes, and cover any training needs, implementation, and reviews. For facilities with specific needs such as bulk oil storage tanks or effluent treatment plants, controls are needed for operations like filling, decanting, and spill cleanup.

Typical inclusions might include Duty of Care checks for waste and chemical storage arrangements.

Organisations must develop processes to identify and respond to environmental emergencies efficiently, ensuring that any environmental impact is kept to a minimum. These procedures should be tested regularly, and all relevant parties should receive the necessary training. Common emergencies to plan for include:

• Power loss
• Fires
• Floods
• Chemical spills

Incorporating principles from business continuity management, such as those found in ISO 22301, can further strengthen emergency preparedness.

This structured approach could help organisations to achieve ISO 14001 compliance and enhance their overall environmental performance.

As an example, organisations might talk through their spill drill every six months and a fuller exercise each year, then record lessons learned and corrective actions.

Read more about environmental emergency preparedness and response.

Interested parties are essential to any business, influencing an organisation’s environmental impact. The needs and expectations of these parties must be incorporated into management systems.

Requirements of interested parties: These can range from legal to business obligations. It’s crucial to document these requirements to align EMS planning accordingly. Once these requirements are documented, strategies can be devised to meet these obligations with minimal disruption to environmental goals.

Examples of interested parties: This might include a customer who expects goods to be delivered using a Battery Electric Vehicle (BEV), or a local community that opposes proposed major construction works.

A legal register might cover Environmental Permitting (where applicable), Duty of Care for Waste, Hazardous Waste consignment notes, F‑Gas Regulations, and relevant water discharge requirements.

As the needs of interested parties can evolve, it’s important to periodically review these parties and integrate any changes into an EMS. Organisations might review the register at least annually and after major changes or incidents.

Implementing an EMS often necessitates new practices and might require additional training. Keeping detailed records of training and competence levels within an organisation aids in tracking necessary upskilling and demonstrates that all members are environmentally responsible.

A simple competency matrix might list spill responders, waste note signatories, environmental data owners, internal auditors, and key contractors.

Ensuring awareness within an organisation about the EMS and related obligations is crucial.

• Internal communications: Methods like emails, meetings, bulletin boards, or intranet announcements may be used to inform teams about environmental objectives, their expected contributions, and responsibilities.
• External communications: Communications such as emails, meetings, letters, and contracts detail expectations from suppliers or how organisations intend to meet their environmental obligations towards third parties.

A key benefit of ISO 14001 is its focus on continual improvement. Monitoring the performance and effectiveness of an EMS is essential. Organisations must maintain records of these evaluations and ensure that they have defined what to measure, how, and when, to maintain appropriate process control.

For example, an organisation might track energy (kWh and an intensity measure), waste by stream and the recycling rate, water (m³), incidents (such as spills and close‑out times), and the percentage of compliance actions completed on time, aiming for 12 months of data where practicable.

Read more about the business benefits of ISO 14001.

Awareness of legal environmental requirements is vital. Routine evaluations must be conducted to confirm these requirements, with regular reviews to ensure this information remains current. Records should also include any obligations to other parties.

For example, an organisation might do quarterly checks for higher‑risk sites and annual checks for lower‑risk sites, with actions, due dates, and owners recorded.

Read about business obligations and environmental laws.

Internal audits assess the effectiveness of an EMS and overall environmental performance, aiding in demonstrating compliance with established processes.

Records should include details of the regular audit programme and any issues or improvement opportunities identified.

For example, many programmes audit significant aspects and the legal register at least annually, rotate auditors to maintain independence, and sample evidence such as waste notes, calibration certificates, maintenance records, and incident investigations.

Senior management should regularly review the EMS to ensure its effectiveness, including the delivery of management review meetings, with documented results of these reviews.

For instance, an organisation’s agenda might cover changes in context and interested parties, performance against objectives and KPIs, compliance status, audit results, resources, risks and opportunities, and decisions on improvements.

Organisations must document any nonconformities in their environmental processes and operations, and the actions taken to address these. The records should include:

• Details of the nonconformity
• Containment actions taken
• Details of investigations into the root causes
• Actions to prevent any opportunities for recurrence and to reduce risk
• Responsibilities for completing actions, timescales, and current status

As an example, missing a waste consignment note might be classed as a minor nonconformity, while a breach of a water discharge consent resulting in visible pollution could be major.

Whether your organisation is fully prepared or just starting, the first step towards ISO 14001 certification is an audit. An auditor will review your existing documentation, identify conformity and report nonconformities or opportunities for improvement in line with audit criteria. This process isn’t a race; it’s about implementing an effective EMS that genuinely aids your organisation in achieving its environmental goals.

For more information about this environmental management standard and starting your certification journey, read a beginner’s guide to ISO 14001.

Is ISO 14001 mandatory in the UK?

ISO 14001 is not mandatory in the UK. It is a voluntary International Organization for Standardization (ISO) Management System Standard for environmental management. However, achieving certification could bring many benefits for businesses. Some customers or supply chains may require ISO 14001 certification as a condition of contract, and many organisations must meet environmental laws and permits regardless of certification. Achieving certification can support how you demonstrate recognised practice and build stakeholder confidence.

Read more about the benefits of ISO 14001.

What is ISO 14001 in simple terms?

ISO 14001 is an international standard that sets out the requirements for an Environmental Management System (EMS). In simple terms, it can help an organisation identify what it does that affects the environment, set objectives to improve performance, keep on top of legal duties, manage risks such as spills or waste, and review progress regularly.

Is ISO 14001 still relevant?

Yes. ISO 14001 remains relevant for organisations that want a recognised, structured way to manage environmental responsibilities. It can support compliance with evolving environmental regulations, provide a consistent approach across multiple sites and suppliers, and help leadership make decisions using reliable data on energy, waste, water, emissions, and incidents. It also helps to demonstrate credible environmental management to customers, partners, and other stakeholders.

ISO 14001 is periodically revised, and is nearing a new version – find out more.

What is the most recent version of ISO 14001?

The current edition is ISO 14001:2015. It follows the high‑level structure used across modern ISO Management System Standards and places emphasis on leadership, organisational context, risks and opportunities, and a life‑cycle perspective. Guidance documents may be issued from time to time, and the next revision is expected to be published in early 2026.

Read about updates and revisions to ISO 14001.