Skip to content
Simple diagram of the plan, do, check, improve cycle with clauses 4 to 10 of ISO 14001 arranged around a green leaf

ISO 140018 min read

ISO 14001 Requirements Explained Simply, Clause by Clause

ISO 14001:2015 explained: what clauses 4 to 10 ask of a small business, which records you must keep and what the standard does not require.

By Zertify Redaktion

ISO 14001:2015 asks your business to understand its environmental impact, set objectives, control the activities that matter and check that it keeps improving. The requirements sit in seven main clauses, numbered 4 to 10. None of them demands a fixed result such as an emission level.

The standard describes a management system, not a performance target. You decide what matters in your business. ISO 14001 asks that you decide it in a structured, repeatable way.

What ISO 14001 is, in plain words

ISO 14001:2015 is the international standard for environmental management systems. Such a system is the set of rules, roles and routines a business uses to manage its effect on the environment: energy use, waste, water, transport, materials and the rules that apply to you.

The clause numbers 4 to 10 will look familiar if you have worked with ISO 9001 or ISO 45001, because all three share the same high level structure. Clauses 1 to 3 cover scope, references and terms. The requirements you must meet start at clause 4.

Behind the numbering is a cycle: plan, do, check, improve. Every clause belongs to one of those steps.

The requirements, clause by clause

Clause 4: Context of the organization

Start with your own business. Which external and internal issues affect your environmental performance? Who expects something from you: customers, authorities, neighbours, employees, your landlord?

Then fix the scope of the system, meaning the sites, activities and products it covers. A small agency with one office writes two lines. A workshop with a delivery fleet needs more.

Clause 5: Leadership

This clause addresses the owner or management, not a specialist. Top management takes responsibility for the system, makes sure it fits the direction of the business and provides the resources.

Two items follow from that:

  • An environmental policy: a short statement committing you to protect the environment, to meet your legal and other obligations, and to improve.
  • Clear roles. Every task has a named person, and everyone knows who it is.

In a small business the owner can hold several of these roles. The standard allows it.

Clause 6: Planning

Clause 6 is the heart of ISO 14001. It has three parts.

Environmental aspects. You identify the parts of your activities, products and services that interact with the environment, for example electricity use, packaging waste, solvents or business travel. Then you judge which of them have a significant impact. The standard asks for a life cycle perspective, so you look beyond your own walls, for instance at what happens to your product after delivery.

Compliance obligations. You list the legal requirements and other commitments that apply to you and know how they affect the business. Other commitments include customer requirements or industry codes you have signed. The standard does not list the laws. You must find out which ones apply in your country and sector.

Risks, opportunities and objectives. For the significant aspects, your obligations and the risks and opportunities you see, you decide what to do. You then set environmental objectives, measurable where practical, and plan how to reach them: what, who, which resources, by when.

Clause 7: Support

A system needs people and information to work. Clause 7 covers:

  • Resources, including time and budget.
  • Competence: people who can affect your environmental performance must be able to do their job properly, through training or experience.
  • Awareness: staff know the policy, the main aspects and what they can do themselves.
  • Communication: what you say internally and externally, to whom and when.
  • Documented information: the records and documents the standard requires, plus those you need yourself.

Clause 8: Operation

Here the plan becomes daily practice. You set controls for the activities tied to your significant aspects. That can be a procedure for waste sorting, rules for handling chemicals, a packaging requirement for suppliers or a maintenance routine for equipment.

Outsourced processes need control as well, and the life cycle comes up again where it makes sense, for instance when you buy or design something.

The second part is emergency preparedness. You identify realistic emergencies, such as a spill or a fire, and plan your response. Where practical, you test it.

Clause 9: Performance evaluation

Now you check. Clause 9 asks for three things:

  • Monitoring and measurement of what matters, such as energy use or waste volumes, together with an evaluation of your compliance with your obligations.
  • An internal audit at planned intervals, to confirm that the system works and meets the standard.
  • A management review, in which top management goes through the results and decides what must change.

A small business can keep the internal audit simple. It still has to be planned, objective and recorded.

Clause 10: Improvement

When something goes wrong, you react, fix the cause and record what you did. The standard calls this nonconformity and corrective action. Beyond that it expects continual improvement, so that the system stays suitable and effective over time.

What you must document

ISO 14001:2015 is less strict about paperwork than the older versions. It speaks of documented information and names what is required. You keep:

  • The scope of the system.
  • The environmental policy.
  • Your environmental objectives.
  • Evidence of competence.
  • Records of monitoring and measurement, and of compliance evaluation.
  • Internal audit results.
  • Management review results.
  • Nonconformities and the actions taken.

Documents that support your operational controls are also needed, as far as their absence would lead to a deviation from your policy or objectives. The standard sets no page count and no format. A clear one-page procedure beats a manual nobody reads.

What the standard does not require

Some common worries have no basis in the text.

  • It sets no level of environmental performance. You meet your own obligations and improve against your own objectives.
  • It does not require a full-time environmental manager.
  • It does not require software.
  • It does not require a printed manual.
  • It does not replace environmental law. Complying with the law is a requirement, but ISO 14001 does not make you compliant by itself.

A small business with a plain, honest system can meet the standard. Our guide to ISO certification for small and medium businesses shows how the size of the system follows the size of the company.

Checklist: are you ready for ISO 14001?

Each item maps to a clause above. Treat the list as a first check.

If most boxes are ticked, you are close. Every gap is simply a task for your plan.

Self-assessment or on-site audit

The two routes to a certificate are different things. In the classic route, a certification body sends an auditor who examines your system on site. A certificate based on self-assessment rests on your own answers and evidence, with no on-site audit.

The second route fits several situations: you want to show customers and partners a structured environmental approach, you need a framework to build your system around, or you want a first step before deciding on an audit.

How Zertify fits in

Zertify issues ISO certificates based on a self-assessment. The page for environmental management is ISO 14001. It shows what the assessment covers and what you receive.

The process has three steps:

  1. You answer the assessment questions, which follow the clause structure described above.
  2. If you pass, and after payment, the certificate is issued within 4 hours.
  3. G6 Agency AG issues the certificate under licence from SICE, the Swiss Institute of Certification and Education. SICE reviews every assessment before issue.

Current fees are on the pricing page. When you are ready, you can start the assessment. The questions also work as a gap check before you decide anything else.

The certificate documents one thing: that you have assessed your own system against ISO 14001:2015.

A sensible order of work

Starting from zero, this order keeps the effort small:

  1. Write the scope and the policy. One page each is enough.
  2. List your aspects and your obligations. A simple table does the job.
  3. Pick two or three objectives you can actually reach.
  4. Define controls for the few activities that matter most.
  5. Decide what you will measure and who checks it.
  6. Plan the first internal audit and the first management review.

Then run the system for a while, keep your records and correct what does not work. The standard rewards consistency more than perfection.

In short

Clauses 4 to 10 lead from understanding your business through planning and control to checking and improving. The paperwork is lighter than many owners expect. What counts is that the system is real, fits your business and gets used.

Frequently asked questions

What are the main requirements of ISO 14001:2015?

You must understand your context, commit as top management with an environmental policy, identify environmental aspects and compliance obligations, set objectives, provide support such as competence and documented information, control operations and prepare for emergencies, evaluate your performance through monitoring, internal audit and management review, and improve continually. These are clauses 4 to 10 of the standard.

Does ISO 14001 require a certain level of environmental performance?

No. The standard requires a management system. You must meet your legal and other obligations and improve against your own objectives, but it sets no fixed targets for emissions, waste or energy.

How much documentation does ISO 14001 require?

The standard names the documented information you must keep: the scope, the policy, objectives, evidence of competence, monitoring records, internal audit and management review results, and corrective actions. It prescribes no format or length. Short, clear documents are enough.

How is a Zertify ISO 14001 certificate issued?

The certificate is based on an online self-assessment, with no on-site audit. G6 Agency AG issues it under licence from SICE, and SICE reviews every assessment before the certificate is issued. Anyone can verify it publicly on zertify.ch.

How fast does Zertify issue the certificate?

Zertify issues the certificate within 4 hours after you have passed the assessment and paid.

Keep reading

More articles

An ISO certificate for your business

Complete the self-assessment online and see your result straight away. You pay only after you pass.

Certificate usually within 4 hours of payment. Issued under licence from SICE, verifiable by QR code.