ISO 14001 is organized across seven requirement clauses — Clauses 4 through 10 — covering the organization's environmental context, leadership commitment, planning, support, operations, performance evaluation, and continual improvement. Together, these clauses define what an Environmental Management System must include, how it must be maintained, and how its effectiveness must be demonstrated.
ISO 14001 is built on a clear, logical structure — but the gap between understanding what each clause says and knowing what it requires in practice is where most EMS implementations run into difficulty. This article walks through all ten clauses of ISO 14001, explaining what each requires and why it matters — referencing ISO 14001:2026 as the current standard, with notes on where the 2026 revision introduced meaningful changes for organizations still on ISO 14001:2015. It draws on the audit experience of Maria Falbo, a Lead Auditor with decades of ISO 14001 experience.
ISO 14001 follows the Harmonized Structure — the common framework used across all major ISO management system standards, including ISO 9001, ISO 45001, and ISO 50001. This means the clause numbering, the core terminology, and the overall logic of the standard are consistent across all of them, which is what makes Integrated Management Systems possible.
Clauses 1 through 3 cover scope, normative references, and definitions — they set the terms of the standard but contain no auditable requirements. The requirements of ISO 14001 begin at Clause 4 and run through Clause 10. These seven clauses form the Plan-Do-Check-Act cycle that underpins the entire EMS: Clauses 4–6 cover planning, Clauses 7–8 cover doing, Clause 9 covers checking, and Clause 10 covers acting.
ISO 14001:2026 was published on April 15, 2026, replacing ISO 14001:2015. The changes are targeted rather than transformative — most organizations with a functioning ISO 14001:2015 system will find the 2026 requirements a refinement rather than a fundamental rebuild. The most significant addition is the new Clause 6.3 on change management, which had no equivalent in the 2015 standard. For a broader overview of what ISO 14001 is, who needs it, and what certification involves, see our complete guide to ISO 14001.
Clause 4 establishes the foundation on which the entire EMS is built. It requires the organization to understand its internal and external environment, identify its interested parties and their requirements, and define the scope of the EMS.
Clause 4.1 — Understanding the organization and its context requires the organization to determine the internal and external issues that are relevant to its environmental purpose and that affect its ability to achieve the intended outcomes of the EMS. Internal issues include operational factors, organizational priorities, resource constraints, and process changes. External issues include the regulatory environment, community expectations, supply chain requirements, and environmental conditions in the organization's operating location.
Under ISO 14001:2026, five specific environmental conditions are now named as mandatory considerations in Clause 4.1: climate change, biodiversity, pollution levels, resource availability, and ecosystem health. Climate change was already a mandatory consideration under the 2024 amendment to ISO 14001:2015 — the 2026 revision integrates this and adds the remaining four. An organization that reviews its environmental context without addressing all five is failing this clause under the 2026 standard.
Clause 4.2 — Understanding the needs and expectations of interested parties requires the organization to identify relevant interested parties — regulatory authorities, customers, local communities, investors, employees, suppliers — and determine their relevant requirements. These requirements then feed into the planning process, particularly compliance obligations (Clause 6.1.3) and communication (Clause 7.4).
Clause 4.3 — Determining the scope of the EMS requires the organization to define the boundaries and applicability of the EMS — which sites, processes, activities, products, and services are included. The scope must be documented and must genuinely reflect the organization's operations. Under ISO 14001:2026, lifecycle perspective is now explicitly required when setting the scope — meaning upstream and downstream impacts the organization can control or influence must be considered, not just what happens within the facility boundary.
Clause 4.4 — Environmental management system requires the organization to establish, implement, maintain, and continually improve an EMS in accordance with the standard's requirements. It is the commitment clause that makes everything else mandatory.
Clause 5 establishes the role of top management in the EMS. It is frequently under-audited because leadership commitment feels less tangible than operational clauses — but it is where the evidence of genuine EMS integration sits.
Clause 5.1 — Leadership and commitment requires top management to take accountability for the effectiveness of the EMS, ensure the environmental policy and objectives are compatible with the organization's strategic direction, ensure integration of EMS requirements into business processes, and provide the resources the EMS needs to function. Under ISO 14001:2026, top management must now support all relevant roles — not just management roles — extending the expected level of personal involvement and accountability.
Clause 5.2 — Environmental policy requires top management to establish, implement, and maintain an environmental policy that commits to environmental protection, compliance with obligations, and continual improvement. The policy must be documented, communicated within the organization, and made available to interested parties.
Clause 5.3 — Organizational roles, responsibilities and authorities requires top management to assign and communicate responsibilities for EMS roles. Someone must be responsible for ensuring the EMS conforms to the standard's requirements, and for reporting EMS performance to top management.
Our ISO 14001 Internal Auditor course covers every requirement from Clause 4 through Clause 10, with practical examples and Maria Falbo's 25+ years of audit expertise.
Clause 6 is where the most critical and most frequently cited nonconformities in ISO 14001 audits are found. It covers the identification and assessment of everything the EMS needs to manage — environmental aspects, compliance obligations, risks and opportunities, and objectives — and under ISO 14001:2026, the planning and management of changes.
Clause 6.1.1 — Actions to address risks and opportunities requires the organization to determine the risks and opportunities that need to be addressed to ensure the EMS can achieve its intended outcomes, prevent undesired effects, and achieve continual improvement. This is distinct from the environmental aspects and impacts assessment — it is a broader strategic risk assessment for the management system itself.
Clause 6.1.2 — Environmental aspects is the cornerstone of the entire EMS and the single most commonly cited nonconformity in ISO 14001 certification audits. The organization must identify the environmental aspects of its activities, products, and services that it can control or influence — and their associated environmental impacts — across normal operations, abnormal conditions, and all potential emergency situations. Under ISO 14001:2026, lifecycle thinking must extend explicitly to supply chain and product end-of-life impacts.
A significance evaluation must determine which aspects have or can have a significant environmental impact. The aspects register is not a one-time exercise — it must be kept current when operations change. For a detailed explanation of how to identify and evaluate environmental aspects and impacts, see our guide to ISO 14001 environmental aspects and impacts.
Clause 6.1.3 — Compliance obligations requires the organization to identify and have access to all applicable legal requirements and other environmental obligations — permits, consent conditions, legislation, voluntary agreements, customer requirements. These must be documented in a compliance obligations register and must be taken into account when establishing, implementing, maintaining, and continually improving the EMS.
Clause 6.1.4 — Risks and opportunities review (new in ISO 14001:2026) formalizes the documentation of risks and opportunities identified under Clause 6.1.1. This is a new sub-clause that makes the risk and opportunity planning process more explicit and auditable.
Clause 6.2 — Environmental objectives requires the organization to establish measurable environmental objectives at relevant functions and levels, consistent with the environmental policy and significant aspects, and to maintain documented action plans for achieving them — specifying what will be done, what resources are required, who is responsible, when it will be completed, and how results will be evaluated.
Clause 6.3 — Planning of changes (new in ISO 14001:2026) is the most significant addition in the 2026 standard. It requires organizations to determine the need for EMS-related changes, plan them in a systematic way, and manage them to ensure the EMS continues to achieve its intended outcomes. This applies to changes driven by new equipment, process modifications, organizational restructuring, new suppliers, and regulatory changes. There was no equivalent requirement in ISO 14001:2015.
Clause 6.1.2 is the clause where I most consistently find weaknesses in audited organizations — not because they didn't build an aspects register, but because they built one and then stopped. A site that commissioned new spray painting equipment, changed its solvent supplier, and extended its production footprint over three years but hasn't touched its aspects register since initial certification is sitting on a major nonconformity. The register reflects the operation as it was, not as it is. Keeping it current requires a process — a deliberate trigger that connects operational change to the EMS review cycle. Most organizations don't have one until an auditor finds it's missing.
Clause 7 covers the resources, competence, awareness, communication, and documented information that make the EMS function. ISO 14001:2026 introduced only minor terminology updates to Clause 7 — the requirements are substantively the same as in the 2015 version.
Clause 7.1 — Resources requires the organization to determine and provide the resources needed to establish, implement, maintain, and continually improve the EMS. Resources include people, infrastructure, technology, and financial support.
Clause 7.2 — Competence requires the organization to determine the competence needed for personnel whose work affects environmental performance and the EMS, ensure they are competent, and retain documented evidence of that competence. Training records must be current and role-specific — a generic environmental awareness session does not satisfy this clause for functions with significant environmental responsibilities.
Clause 7.3 — Awareness requires that all relevant personnel — including contractors working under the organization's control — are aware of the environmental policy, the significant environmental aspects related to their work, their contribution to EMS effectiveness, and the implications of not conforming to EMS requirements.
Clause 7.4 — Communication requires the organization to establish a process for internal and external environmental communication — determining what to communicate, when, to whom, and how. Under ISO 14001:2026, Annex A expands on communication principles including transparency, timeliness, and factual accuracy.
Clause 7.5 — Documented information requires the organization to maintain the documented information required by the standard and determine what additional documented information is needed for EMS effectiveness. Version control, access controls, and document retention are all auditable requirements under this clause.
Clause 8 is the implementation clause — where the EMS moves from planning into practice. It covers operational planning and control, lifecycle perspective, and emergency preparedness and response.
Clause 8.1 — Operational planning and control requires the organization to establish, implement, control, and maintain the processes needed to meet EMS requirements and implement actions identified in the planning phase. Operational controls must exist for every significant environmental aspect, those controls must be documented where necessary, and they must actually be followed in practice.
Under ISO 14001:2026, Clause 8.1 explicitly requires operational controls to extend to externally provided processes, products, and services. Procurement practices, supplier specifications, and contractor management are now auditable under this clause. For a practical walkthrough of how to build and implement these controls, see our guide to implementing ISO 14001 in manufacturing.
Clause 8.2 — Emergency preparedness and response requires the organization to prepare for and respond to potential emergency situations related to the EMS. Under ISO 14001:2026, emergency situations are separated from abnormal operations and must be planned for explicitly — including climate change-related scenarios such as flooding and extreme weather events. The organization must identify potential emergency situations, establish response procedures, test those procedures through drills or exercises, and review and update them following actual incidents or tests.
Clause 8.1 is where the audit moves from the document review into the operation — and it's where the gap between what the EMS says and what the site actually does becomes visible. I've audited facilities where the spill containment procedure specifies weekly inspections of certain areas, but the inspection records stop six months before the audit and nobody on site can explain why. The procedure is there. The control is documented. But it isn't functioning. That's a Clause 8.1 nonconformity regardless of how well the rest of the documentation looks. Operational control isn't about having the right paperwork — it's about the right things happening consistently in the operation.
Clause 9 covers the monitoring, measurement, analysis, and evaluation mechanisms through which the organization assesses EMS performance and demonstrates that it is working as intended.
Clause 9.1.1 — Monitoring, measurement, analysis and evaluation requires the organization to determine what needs to be monitored and measured, the methods to be used, when monitoring and measurement will be performed, and when results will be analyzed. Key environmental performance indicators — energy consumption, emissions, waste generation, water use, compliance status — must be monitored at defined frequencies using calibrated equipment where necessary.
Clause 9.1.2 — Evaluation of compliance is one of the most frequently neglected clauses in ISO 14001 audits. It requires the organization to establish, implement, and maintain a process for evaluating compliance with its legal and other obligations — and to retain documented evidence of those evaluations. Identifying compliance obligations under Clause 6.1.3 is necessary but not sufficient. The organization must actively check whether it is meeting them and document that it has done so.
Clause 9.2 — Internal audit requires the organization to conduct internal audits at planned intervals to determine whether the EMS conforms to requirements and is effectively implemented and maintained. The audit program must be risk-based, covering all clauses across the audit cycle. For a complete guide to planning and conducting ISO 14001 internal audits, see our ISO 14001 Internal Audit: The Complete Guide.
Clause 9.3 — Management review requires top management to review the EMS at planned intervals to ensure its continuing suitability, adequacy, and effectiveness. The review must address a defined set of inputs — audit results, compliance status, environmental performance, objectives progress, stakeholder concerns — and produce documented results including decisions on improvement actions and resource needs. ISO 14001:2026 restructures the management review clause into three sub-clauses (9.3.1 General, 9.3.2 Inputs, 9.3.3 Results) with more clearly articulated documentation requirements.
Clause 10 covers nonconformity and corrective action, and the continual improvement obligation that runs through the entire standard. ISO 14001:2026 made only minor terminology updates to Clause 10.
Clause 10.1 — General states that the organization must determine opportunities for improvement and implement necessary actions to achieve the intended outcomes of the EMS.
Clause 10.2 — Nonconformity and corrective action requires that when a nonconformity occurs, the organization reacts to control and correct it, investigates the root cause, implements corrective actions to eliminate the root cause, and reviews the effectiveness of those actions. The emphasis on root cause analysis is critical — corrective actions that address only the immediate symptom without identifying and eliminating the underlying cause are not compliant with this clause.
Clause 10.3 — Continual improvement requires the organization to continually improve the suitability, adequacy, and effectiveness of the EMS. Evidence of continual improvement might include environmental objectives that become more ambitious as targets are met, reductions in significant environmental impacts, or systematic identification and closure of improvement opportunities through the internal audit program.
For a practical guide to implementing these requirements, see our guide to how to implement ISO 14001. For help assessing where your current EMS stands against these requirements, see our ISO 14001 gap analysis guide.
The 2026 revision introduced several targeted changes rather than a fundamental overhaul. The most significant addition is the new Clause 6.3 on planning and managing of changes, which had no equivalent in the 2015 standard. The context clause (4.1) now explicitly requires consideration of biodiversity, pollution levels, resource availability, and ecosystem health alongside climate change. Operational controls under Clause 8.1 must now extend to externally provided processes and suppliers. Emergency situations are separated from abnormal operations under Clause 8.2. Management review has been restructured into three sub-clauses. Most other changes are terminology updates or clarifications.
The internal audit program must cover all clauses of ISO 14001 across the audit cycle — but not every clause needs to be audited in every individual audit. Clause 9.2.2 requires the audit program to be risk-based, meaning areas with significant environmental aspects or a history of nonconformities should be audited more frequently. Full clause coverage should be achieved within each 12-month program cycle.
Clause 6.1.2 — environmental aspects and impacts — is consistently the most frequently cited nonconformity in ISO 14001 certification audits. The most common failure is an aspects register that was developed when the EMS was first implemented and has not been kept current as operations have changed. Clause 9.1.2 — evaluation of compliance — is a close second, with many organizations identifying compliance obligations but failing to document any formal evaluation of whether they are meeting them.
Yes — ISO 14001 and ISO 9001 share the same Harmonized Structure, which means their clause numbering, terminology, and overall logic align closely. Many organizations implement and maintain them as an Integrated Management System, running combined internal audits and management reviews that address both standards simultaneously. The shared structure makes integration straightforward — the main work is mapping the environmental-specific requirements of ISO 14001 alongside the quality-specific requirements of ISO 9001.
No — ISO 14001 does not require organizations to eliminate environmental impacts. It requires organizations to identify their significant environmental aspects and impacts, establish controls to manage them, set objectives for improvement, and demonstrate continual improvement in environmental performance over time. The standard is built on the principle of continual improvement, not perfection. What it does require is that the organization is actively managing its environmental impacts in a systematic and documented way.
Maria Falbo has over 25 years of experience working as a Lead Auditor for certification bodies worldwide. She founded Logix ISO with the mission of making expert-level ISO training accessible to organizations of all sizes. Her work spans Quality, Environmental, Occupational Health and Safety, Food Safety, Automotive, and Energy management systems.
Learn more about Maria →Self-paced · 365-day access · Training certificate included