ISO 14001:2026 Clause 8
SQMC Technical Faculty
·
7 minute read
ISO 14001:2026 for Auditors > Clause 8
Explained: Operation
Clause 8 of ISO 14001 is about putting environmental plans into operation. In plain English, this means the organisation must control the activities, processes, externally provided products and services, and emergency situations that can affect the Environmental Management System and its intended outcomes.
What is ISO 14001 Clause 8 trying to achieve?
Clause 8 is where the EMS moves from planning into action.
Earlier clauses ask the organisation to understand its context, identify environmental aspects, determine compliance obligations, consider risks and opportunities, and plan action.
Clause 8 then asks: how will the organisation control the work?
It focuses on two areas:
- Clause 8.1 — operational planning and control;
- Clause 8.2 — emergency preparedness and response.
The purpose is to ensure that environmentally important activities are controlled, externally provided processes, products and services are controlled or influenced where relevant, lifecycle issues are addressed where appropriate, and emergency situations are prepared for.
Why Clause 8 matters in an EMS
Clause 8 is one of the most practical parts of ISO 14001.
A beautifully written EMS will fail if operational controls do not work in real life.
For example:
- chemical storage risks need actual storage controls;
- waste requirements need real segregation and disposal arrangements;
- contractor risks need clear site rules and supervision;
- energy objectives need operational actions;
- emergency scenarios need preparation, equipment and response arrangements;
- lifecycle influence needs procurement, design, supplier or customer-facing controls where relevant.
Clause 8 helps ensure that the EMS is not just a planning tool. It should affect how work is actually carried out.
How Clause 8 fits into the EMS
Clause 8 sits mainly in the “Do” part of Plan–Do–Check–Act.
It takes inputs from planning and support clauses, including:
- Clause 6.1.2 — environmental aspects;
- Clause 6.1.3 — compliance obligations;
- Clause 6.1.4 — risks and opportunities;
- Clause 6.1.5 — planning action;
- Clause 6.2 — environmental objectives;
- Clause 6.3 — planning of changes;
- Clause 7.1 — resources;
- Clause 7.2 — competence;
- Clause 7.3 — awareness;
- Clause 7.4 — communication;
- Clause 7.5 — documented information.
It then feeds evidence into:
- Clause 9.1 — monitoring, measurement, analysis and evaluation;
- Clause 9.2 — internal audit;
- Clause 9.3 — management review;
- Clause 10.1 — continual improvement;
- Clause 10.2 — nonconformity and corrective action.
Auditors should see Clause 8 as the bridge between EMS planning and real-world environmental control.
Clause 8.1 — Operational planning and control
Clause 8.1 asks the organisation to establish, implement, control and maintain the processes needed to meet EMS requirements and implement the actions determined in Clause 6.
In simple terms, it asks the organisation to control environmentally important work.
The organisation should establish operating criteria for relevant processes and implement controls in line with those criteria.
Operational controls may include:
- engineering controls;
- procedures and work instructions;
- administrative controls;
- maintenance routines;
- inspection checks;
- storage controls;
- waste segregation arrangements;
- contractor controls;
- supplier requirements;
- procurement specifications;
- monitoring arrangements;
- change controls;
- communication and training requirements.
The organisation should also control planned changes, review the consequences of unintended changes, and take action to mitigate adverse effects where necessary.
Read the detailed SQMC guide to operational planning and control.
Externally provided processes, products and services
Clause 8.1 requires the organisation to control or influence externally provided processes, products and services that are relevant to the intended outcomes of the EMS.
This may include:
- waste contractors;
- maintenance contractors;
- cleaning contractors;
- transport and logistics providers;
- chemical suppliers;
- outsourced manufacturing or service activities;
- facilities management providers;
- environmental monitoring providers;
- contractors carrying out construction, refurbishment or installation work.
The type and extent of control or influence should be defined within the EMS. In practice, this may involve supplier approval, contract requirements, contractor induction, site rules, inspection, monitoring, audits or review meetings.
Lifecycle perspective in Clause 8
Clause 8 is where lifecycle perspective becomes very practical.
Consistent with a lifecycle perspective, the organisation should consider environmental requirements in relevant areas such as design and development, procurement, external provider communication, and information provided about potential significant environmental impacts associated with its products and services.
This may include:
- design and development of products or services;
- raw material selection;
- procurement specifications;
- supplier and contractor requirements;
- production or service delivery controls;
- transport and delivery arrangements;
- customer use of products or services;
- maintenance information;
- end-of-life treatment, reuse, recycling or disposal information.
The organisation does not need to control every lifecycle stage. It should consider where it has control, where it has influence, and what operational arrangements are appropriate.
Clause 8.2 — Emergency preparedness and response
Clause 8.2 asks the organisation to establish, implement and maintain the processes needed to prepare for and respond to potential emergency situations identified through environmental aspects planning.
Environmental emergencies may include:
- chemical spills;
- fuel leaks;
- oil leaks from vehicles or equipment;
- loss of containment from tanks, drums or bunds;
- firewater runoff;
- flooding affecting storage areas;
- uncontrolled emissions;
- unplanned discharges to drain, sewer or watercourse;
- waste storage failures;
- failure of pollution-control equipment;
- contractor-caused environmental incidents.
Emergency preparedness should include planned response actions, response to actual emergencies, actions to prevent or mitigate consequences, testing where practicable, review and revision after emergencies or tests, and relevant information and training for appropriate interested parties, including people working under the organisation’s control.
Read the detailed SQMC guide to emergency preparedness and response.
Operational control should follow EMS planning
Operational controls should not be random. They should follow from the organisation’s EMS planning.
For example:
- significant environmental aspects should lead to controls;
- compliance obligations should be built into procedures and checks;
- risks and opportunities should lead to planned actions;
- environmental objectives may require operational changes;
- planned changes should be controlled before implementation;
- potential emergency situations should be prepared for based on identified risks and aspects.
Auditors should be able to trace a line from planning to operation. If the aspect register identifies a significant spill risk, the auditor should expect to find suitable spill controls in operation.
Documented information in Clause 8
Clause 8 uses documented information to support consistent control and provide confidence that processes are being carried out as planned.
ISO 14001:2026 expects the processes for Clauses 8.1 and 8.2 to be available as documented information to the extent necessary to have confidence that they are carried out as planned.
Examples may include:
- operational procedures;
- work instructions;
- operating criteria;
- inspection records;
- maintenance records;
- contractor induction records;
- supplier approval records;
- procurement requirements;
- waste transfer records;
- monitoring records;
- emergency response plans;
- spill drill records;
- emergency equipment checks;
- incident reports;
- change-control records.
The level of documentation should be proportionate to the environmental risk and complexity of the process.
What auditors typically look for in Clause 8
Auditors look for evidence that operational controls and emergency arrangements are planned, implemented, maintained and effective.
Evidence may include:
- operational planning and control procedures;
- operating criteria;
- site observations;
- aspect and impact register;
- compliance obligation records;
- risk and opportunity records;
- contractor and supplier controls;
- procurement requirements;
- inspection and maintenance records;
- monitoring records;
- emergency response plans;
- spill kits or emergency equipment checks;
- emergency drill records;
- incident records and corrective actions;
- interviews with employees, contractors and process owners.
Auditor tip
Clause 8 is best audited on the ground. Walk the process, observe controls, speak to people, and compare what is actually happening with the EMS arrangements. The procedure may say one thing; the loading bay may say another.
Common weaknesses in Clause 8
- operational controls are not linked to significant environmental aspects;
- operating criteria are unclear;
- procedures exist but are not followed in practice;
- planned changes are not properly controlled;
- unintended changes are not reviewed or mitigated;
- contractors are not controlled effectively;
- externally provided processes, products or services affecting EMS outcomes are ignored;
- lifecycle considerations are mentioned but not applied operationally;
- procurement does not reflect relevant environmental requirements;
- emergency scenarios are incomplete or outdated;
- emergency response plans are not tested where practicable;
- spill kits or emergency equipment are missing, inaccessible or unchecked;
- records do not show that controls have operated as planned.
Weak example
“The organisation controls environmental risks through procedures and emergency plans.”
This is weak because it does not show which risks are controlled, whether operating criteria are defined, whether controls are implemented, whether externally provided processes are covered, whether people understand the controls, or whether emergency response arrangements work in practice.
Better example
“The organisation has identified significant environmental aspects and related operational controls. Chemical storage is controlled through bunding, inspections, spill kits, staff training and contractor rules. Waste is controlled through segregation, licensed carriers and transfer records. Procurement requirements include relevant environmental criteria, and emergency arrangements are tested and reviewed after drills or incidents.”
This is stronger because it connects EMS planning to practical operational controls, lifecycle influence, emergency preparedness and evidence.
Real-world example: manufacturing site
A manufacturing site identifies chemical storage, solvent emissions, waste handling and equipment maintenance as important EMS issues.
Clause 8 controls may include:
- bunded chemical storage;
- operating criteria for high-risk processes;
- segregated waste areas;
- approved waste contractors;
- maintenance of extraction or filtration equipment;
- operator work instructions;
- contractor permits-to-work;
- procurement controls for relevant materials;
- emergency response plans;
- spill-kit inspections;
- emergency drills;
- monitoring of emissions or waste movements.
An auditor could test Clause 8 by reviewing the aspect register, then walking the site to check whether the planned controls are visible and effective.
Real-world example: office-based organisation
An office-based organisation may have simpler operational controls, but Clause 8 still applies.
Controls may include:
- waste and recycling arrangements;
- energy-saving routines;
- procurement controls for IT equipment and supplies;
- business travel controls;
- approved routes for IT equipment disposal;
- contractor rules for cleaning or maintenance providers;
- emergency arrangements for fire, flood or building incidents.
Operational control should be proportionate to the organisation’s context, aspects, compliance obligations and risks.
Auditor questions for ISO 14001 Clause 8
- What processes need operational control?
- What operating criteria have been established?
- How are controls implemented in line with those criteria?
- What operational controls are needed for significant environmental aspects?
- How are compliance obligations built into operational controls?
- How are planned changes controlled?
- How are unintended changes reviewed and mitigated where necessary?
- How does the organisation control or influence externally provided processes, products and services?
- How are contractors and external providers informed of relevant environmental requirements?
- How is lifecycle perspective applied in design, procurement, delivery, use or end-of-life stages where relevant?
- What potential emergency situations have been identified?
- How does the organisation prepare for and respond to emergencies?
- Are emergency response arrangements tested where practicable?
- How are emergency arrangements reviewed after tests or actual emergencies?
- What documented information gives confidence that Clause 8 processes are carried out as planned?
Related ISO 14001 clauses
- Clause 6.1.2 — Environmental aspects
- Clause 6.1.3 — Compliance obligations
- Clause 6.1.4 — Risks and opportunities
- Clause 6.1.5 — Planning action
- Clause 6.3 — Planning of changes
- Clause 7.1 — Resources
- Clause 7.2 — Competence
- Clause 7.3 — Awareness
- Clause 7.4 — Communication
- Clause 7.5 — Documented information
- Clause 9.1 — Monitoring, measurement, analysis and evaluation
- Clause 9.2 — Internal audit
- Clause 9.3 — Management review
- Clause 10.1 — Continual improvement
- Clause 10.2 — Nonconformity and corrective action
Continue learning
This page is part of SQMC’s ISO 14001:2026 guidance library for auditors, managers and QHSE professionals.
Ready to put ISO 14001 into practice?
SQMC’s ISO 14001 Internal Auditor course helps you move from understanding the Standard to auditing it with confidence. Over two practical days, you’ll learn how to plan EMS audits, gather evidence, ask better questions, write nonconformities and report findings clearly.
Learn from anywhere in our Virtual Classroom, attend one of our training centres, or arrange private in-company training for your team.