ISO 14001 Internal Audit Checklist (Free, PDF/Word)

0%

0 of 38 items complete

13 critical items still open - these are the highest-risk gaps.

Download checklist:

Context and leadership (clauses 4 and 5)

External and internal issues relevant to the EMS are identified and reviewedNeeds and expectations of interested parties are determined, including which become compliance obligationsEMS scope is documented, with boundaries and applicability statedCRITICALProcesses of the EMS and their interactions are established and maintainedTop management demonstrates leadership and integrates EMS requirements into business processesEnvironmental policy is documented, communicated and available to interested partiesCRITICALRoles, responsibilities and authorities are assigned and communicated

Planning (clause 6)

Environmental aspects and impacts are identified, including life cycle perspectiveCRITICALSignificance criteria are defined and significant aspects are determined and recordedCRITICALAbnormal and emergency conditions are considered in aspect identificationCompliance obligations are identified, accessible and linked to the operations they affectCRITICALRisks and opportunities are determined and actions plannedEnvironmental objectives are measurable where practicable and aligned with the policyCRITICALPlans to achieve objectives define who, what resources, when and how results are evaluated

Support (clause 7)

Resources needed for the EMS are determined and providedPersons doing work that affects environmental performance are competent, with recordsCRITICALTraining needs linked to significant aspects and compliance obligations are identifiedWorkers are aware of the policy, significant aspects and consequences of nonconformityInternal and external communication processes are defined and followedDocumented information is controlled for approval, access, revision and retention

Operation (clause 8)

Operational controls are established for processes tied to significant aspectsCRITICALLife cycle controls address design, procurement, transport, use and end of life where relevantRequirements are communicated to external providers and contractorsChemicals, fuels, waste and wastewater are handled as defined in proceduresEmergency situations are identified and response plans existCRITICALEmergency response is tested periodically and reviewed after real eventsPlanned changes are controlled and unintended changes reviewed

Performance evaluation (clause 9)

Monitoring and measurement of key characteristics is defined, with calibrated equipmentCRITICALCompliance with legal and other requirements is evaluated at planned intervals, with recordsCRITICALInternal audit programme covers all EMS areas, with defined criteria and impartial auditorsAudit results are reported to relevant management and records retainedManagement review inputs include changes, objectives status, compliance, audits and resourcesCRITICALManagement review outputs include decisions on improvement and resource needs

Improvement (clause 10)

Nonconformities are reacted to, controlled, corrected and the consequences dealt withRoot cause is determined and corrective action is reviewed for effectivenessCRITICALSimilar nonconformities elsewhere are checked forRecords of nonconformities and corrective action results are retainedThe EMS is continually improved for suitability, adequacy and effectiveness

Score each item as conforming, minor nonconformity or major nonconformity during the audit. Any critical item without objective evidence is normally raised as a nonconformity. Sample records rather than only asking questions.

Back your audit with ERP evidence

Optional: discuss pulling chemical, waste and calibration records straight from your ERP for audit sampling.

Optional. The tool and every export work without this. No spam.

How to use it

Plan the audit by clause and by process, pick a sample of records, then walk the checklist with the process owner. For each item, ask to see evidence: a register, a training record, a monitoring log or the area itself. Mark what you find, note the objective evidence, and export the result for the audit report. Rotate auditors so the same people do not always check the same area.

Audit against the standard, your own procedures and legal requirements
Interview operators as well as managers
Follow a waste stream or chemical from receipt to disposal
Record evidence for conforming items too

The method behind it

The structure follows the high-level structure shared by ISO management standards. Clause 6 is the core: aspects and impacts, compliance obligations, risks and opportunities, and objectives. Clause 9.2 requires an audit programme with defined criteria and scope, and clause 10 requires corrective action with root cause. This list paraphrases the requirements and does not reproduce the standard, so keep a copy of the licensed text for exact wording.

Reading the result

Cluster the findings. Gaps in aspects, compliance evaluation or operational control are the ones certification auditors weight heavily because they affect actual environmental performance. Documentation-only gaps are easier to close. Give each nonconformity an owner and date, then verify closure in the next audit cycle and feed the pattern into the management review.

Common mistakes

Typical faults are an aspects register that was never updated, objectives that cannot be measured, legal registers without evidence of evaluation, internal audits that only check paperwork, and corrective actions closed without checking effectiveness. Avoid auditing your own work, and make sure contractors on site fall inside your operational controls.

Frequently Asked Questions

How often must internal audits be done?

ISO 14001 requires audits at planned intervals, not a fixed frequency. Most organisations audit the full EMS at least once a year, with higher-risk processes or past problem areas checked more often.

Who can be an internal auditor?

Anyone competent and impartial: they should not audit their own work. Training in auditing, for example based on ISO 19011 guidance, and knowledge of the standard and your processes are expected and should be recorded.

What is the difference between a major and minor nonconformity?

A major nonconformity is a failure to meet a requirement or a breakdown of a system element, or a situation likely to cause a significant environmental harm. A minor one is an isolated lapse. Define your own grading rules in the audit procedure.

Does passing this checklist mean we are certified?

No. Certification is granted by an accredited certification body after its own audit. This checklist prepares you by finding gaps in your own system before the external auditor does.

Netray can help surface audit evidence from your ERP, such as chemical purchasing, waste postings and calibration status, so the checklist is backed by data rather than sampling alone.

Talk to an Expert Explore More Free Tools

Related Tools

Safety & Workforce

More Compliance & Contracts tools

See all

ISO 14001:2015 Internal Audit Checklist for Manufacturers