What is an ISO 14001 audit programme?

An ISO 14001 audit programme is the organisation’s overall arrangement for planning and carrying out internal EMS audits over a defined period of time.

In simple terms, it answers:

• what will be audited;
• when audits will happen;
• how often audits will take place;
• who will audit;
• what audit criteria will be used;
• what scope each audit will cover;
• how audit results will be reported and followed up.

A good audit programme should help the organisation check whether its Environmental Management System conforms to ISO 14001, meets its own EMS requirements, and is effectively implemented and maintained.

Why use an EMS audit programme template?

A template helps turn internal auditing from a vague annual task into a planned, risk-based process.

It helps ensure audits consider:

• significant environmental aspects;
• compliance obligations;
• operational controls;
• environmental objectives;
• contractor and supplier risks;
• previous audit findings;
• changes affecting the organisation;
• emergency preparedness;
• management review inputs;
• continual improvement opportunities.

This is important because a weak audit programme can easily become a box-ticking calendar. A strong audit programme helps the organisation focus its auditing effort where it matters most.

Audit programme, audit plan and audit checklist: what is the difference?

These terms are often mixed up, but they are not the same.

Audit programme

The audit programme is the overall schedule and strategy for audits over time. It usually covers a year, although organisations may use another suitable period.

It identifies which EMS areas will be audited, when they will be audited, how often they will be audited, and why they have been prioritised.

Audit plan

The audit plan is the plan for a specific audit.

It normally defines the audit objective, scope, criteria, date, timings, auditor, auditees, locations, processes to be reviewed and methods to be used.

Audit checklist

The audit checklist is a working tool used by the auditor during the audit.

It may include questions, evidence prompts, clause references, process checks and notes. A checklist should support the audit, not replace auditor judgement.

What does ISO 14001 expect from an audit programme?

ISO 14001 Clause 9.2.2 expects the organisation to establish, implement and maintain an internal audit programme.

The programme should include frequency, methods, responsibilities, planning requirements and reporting.

It should also consider:

• the environmental importance of the processes concerned;
• changes affecting the organisation;
• results of previous audits.

The organisation should also define the audit criteria and scope for each audit, select auditors to ensure objectivity and impartiality, report audit results to relevant management, and retain documented information as evidence of the audit programme and audit results.

Read the SQMC guide to ISO 14001 internal audit.

Free ISO 14001 audit programme template

You can use the structure below as a simple EMS audit programme template. It can be copied into Word, Excel, Google Sheets or your own management system.

For most organisations, a spreadsheet version works best because it can be filtered, updated, colour coded and reviewed throughout the year.

This example is deliberately simple. Organisations should adapt the programme to reflect their own environmental aspects, compliance obligations, operational risks, EMS scope, previous findings and available audit resources.

Blank copy-and-paste audit programme template

The blank structure below can be copied into your own spreadsheet or document.

How to build an effective ISO 14001 audit programme

A strong audit programme should be more than a list of dates.

When building the programme, consider:

• the EMS scope;
• sites, departments and processes;
• significant environmental aspects;
• compliance obligations;
• environmental objectives;
• risks and opportunities;
• operational controls;
• outsourced processes;
• contractor activities;
• previous audit findings;
• environmental incidents or complaints;
• changes to activities, people, equipment, suppliers or legal requirements.

High-risk, high-importance or poor-performing areas should normally receive more audit attention than low-risk, stable areas.

Example audit programme priorities

The table below shows how different factors may influence audit priority.

Internal audits, supplier audits and external audits

This template is mainly designed for ISO 14001 internal audit programmes.

However, the same planning principles can also support:

• supplier audits;
• contractor audits;
• second-party audits;
• multi-site audit programmes;
• pre-certification readiness audits;
• preparation for external certification audits.

The key is to define the audit objective, scope, criteria, method, responsibility and follow-up arrangements clearly.

Common mistakes when creating an EMS audit programme

• auditing every clause once per year without considering environmental risk;
• forgetting to include compliance obligations;
• failing to audit operational controls on site;
• ignoring contractors, suppliers or outsourced processes;
• not considering previous audit results;
• using the same checklist every year with no fresh thinking;
• not defining audit criteria and scope for each audit;
• failing to ensure auditor objectivity;
• not tracking audit findings through to action and closure;
• leaving audit results disconnected from management review.

Practical auditor questions when reviewing an audit programme

• Does the audit programme cover the EMS scope?
• Does it consider significant environmental aspects?
• Does it consider compliance obligations?
• Does it consider previous audit findings?
• Does it consider changes affecting the organisation?
• Are high-risk or high-importance areas audited often enough?
• Are audit criteria and scope defined for each audit?
• Are auditors competent and objective?
• Are audit results reported to relevant management?
• Are findings followed up and used for improvement?

Related ISO 14001 guidance

• ISO 14001 internal audit explained
• Clause 9 — Performance evaluation
• Monitoring, measurement, analysis and evaluation explained
• Evaluation of compliance explained
• Management review explained
• Return to ISO 14001:2026 for Auditors