ISO 14001 Environmental Management Checklist

Confirm the policy is signed by the highest level of site leadership (plant manager or GM), posted at the shop-floor entrance and break rooms, and shared with key suppliers per clause 5.2. Common gap during surveillance audits: the posted copy is the prior revision.

Walk each work center and re-score aspects (air emissions, wastewater, hazardous waste, chemical use, energy, noise) against your significance criteria. Add any aspects introduced by ECNs, new chemicals, or process changes since the last review. The register drives operational controls in section 2.

Cover federal (CAA Title V or synthetic minor, RCRA generator status, NPDES, EPCRA Tier II, TRI), state (air permit, stormwater, chemical right-to-know), and customer-flowdown requirements (RoHS, REACH, conflict minerals). Note any new rules effective this period — state PFAS reporting and EPA TSCA 8(a)(7) catch sites by surprise.

Set measurable targets tied to significant aspects — waste diversion %, kWh per unit produced, gallons per unit, scope 1+2 tCO2e, hazardous waste lbs per shipment. Each objective needs an owner, a target value, and a review cadence.

Confirm the management representative, internal audit lead, waste accumulation area attendant (RCRA), spill coordinator, and stormwater pollution prevention plan (SWPPP) lead. Update the org chart and the EMS manual when people change.

Cover the policy, significant aspects relevant to each role, emergency response actions, and HazCom (GHS labels, SDS access). New hires get this in onboarding; the workforce gets it annually. Capture sign-in sheets — surveillance auditors ask for them.

Walk the floor and confirm the controls are present and used: secondary containment under drums, satellite accumulation labels with start dates, hazardous waste 90/180/270-day clock observed, drain markings, segregated waste streams, air-permit recordkeeping logs current at the source.

Match the chemical inventory against the SDS binder. Any chemical introduced through procurement without an SDS update is an OSHA HazCom citation waiting to happen and may shift your EPCRA Tier II reporting threshold.

Pull period data for waste, energy, water, air, and chemical usage. Trend against baseline and target. Flag any KPI moving in the wrong direction for management review.

Verify calibration on flow meters, pH probes, opacity monitors, sound level meters, and CEMS components per ISO 17025-traceable standards. Past-due gauges invalidate the readings used in compliance reports — red-tag and pull from service.

Per clause 9.1.2, walk the legal register line-by-line and document compliance status for each requirement with objective evidence (logs, manifests, permit reports). This is the most-scrutinized clause in surveillance audits.

Use a trained internal auditor independent of the area being audited. Cover all clauses on a rolling 3-year schedule, with significant aspects audited every cycle. Document objective evidence — auditor opinion alone does not stand up at the registrar audit.

For each finding, perform root cause analysis (5-why or fishbone), document containment, correction, and corrective action with an owner and due date. CARs that close without a documented effectiveness check are the most common registrar nonconformity issued in resurveillance.

Re-audit the affected process or sample evidence after the action has had time to take effect. Close only if the failure mode has not recurred over a defined verification window. Document the effectiveness check separately from the action itself.