Skip to content
Enquire
All posts

ISO 14001:2026 Clause 8

Picture of SQMC Technical Faculty   SQMC Technical Faculty  ·  6 minute read

ISO 14001:2026 for Auditors > Clause 8

Explained: Operation

Clause 8 of ISO 14001 is about putting environmental plans into operation. In plain English, this means the organisation must control the activities, processes and emergency situations that can affect environmental performance or compliance obligations.

What is ISO 14001 Clause 8 trying to achieve?

Clause 8 is where the EMS moves from planning into action.

Earlier clauses ask the organisation to understand its context, identify environmental aspects, determine compliance obligations, consider risks and opportunities, and set objectives.

Clause 8 then asks: how will the organisation control the work?

It focuses on two major areas:

  • Clause 8.1 — operational planning and control;
  • Clause 8.2 — emergency preparedness and response.

The purpose is to ensure that environmentally important activities are controlled, outsourced or externally provided activities are considered, lifecycle issues are addressed where relevant, and emergency situations are prepared for.

Why Clause 8 matters in an EMS

Clause 8 is one of the most practical parts of ISO 14001.

A beautifully written EMS will fail if operational controls do not work in real life.

For example:

  • chemical storage risks need actual storage controls;
  • waste requirements need real segregation and disposal arrangements;
  • contractor risks need clear site rules and supervision;
  • energy objectives need operational actions;
  • emergency scenarios need preparation, equipment and response arrangements;
  • lifecycle influence needs procurement, design, supplier or customer-facing controls where relevant.

Clause 8 helps ensure that the EMS is not just a planning tool. It should affect how work is actually carried out.

How Clause 8 fits into the EMS

Clause 8 sits mainly in the “Do” part of Plan–Do–Check–Act.

It takes inputs from planning and support clauses, including:

  • Clause 6.1.2 — environmental aspects;
  • Clause 6.1.3 — compliance obligations;
  • Clause 6.1.4 — risks and opportunities;
  • Clause 6.1.5 — planning action;
  • Clause 6.2 — environmental objectives;
  • Clause 7.2 — competence;
  • Clause 7.3 — awareness;
  • Clause 7.4 — communication;
  • Clause 7.5 — documented information.

It then feeds evidence into:

  • Clause 9.1 — monitoring, measurement, analysis and evaluation;
  • Clause 9.2 — internal audit;
  • Clause 9.3 — management review;
  • Clause 10.2 — nonconformity and corrective action;
  • Clause 10.3 — continual improvement.

Auditors should see Clause 8 as the bridge between EMS planning and real-world environmental control.

Clause 8.1 — Operational planning and control

Clause 8.1 asks the organisation to establish, implement, control and maintain the processes needed to meet EMS requirements and implement planned actions.

In simple terms, it asks the organisation to control environmentally important work.

Operational controls may include:

  • procedures and work instructions;
  • engineering controls;
  • maintenance routines;
  • inspection checks;
  • storage controls;
  • waste segregation arrangements;
  • contractor controls;
  • supplier requirements;
  • procurement specifications;
  • monitoring arrangements;
  • change controls;
  • communication and training requirements.

The organisation should also consider lifecycle perspective and the degree of control or influence it has over activities, products and services.

Read the detailed SQMC guide to operational planning and control.

Clause 8.2 — Emergency preparedness and response

Clause 8.2 asks the organisation to prepare for and respond to potential emergency situations that can have environmental impacts.

Environmental emergencies may include:

  • chemical spills;
  • fuel leaks;
  • firewater runoff;
  • flooding;
  • loss of containment;
  • uncontrolled emissions;
  • pollution of drains, land or watercourses;
  • waste storage failures;
  • equipment failures affecting environmental controls.

Emergency preparedness should include planned response actions, communication arrangements, testing where practicable, review and revision after incidents or tests, and relevant information for people working under the organisation’s control.

Read the detailed SQMC guide to emergency preparedness and response.

Operational control should follow EMS planning

Operational controls should not be random. They should follow from the organisation’s EMS planning.

For example:

  • significant environmental aspects should lead to controls;
  • compliance obligations should be built into procedures and checks;
  • risks and opportunities should lead to planned actions;
  • environmental objectives may require operational changes;
  • planned changes should be controlled before implementation;
  • emergency situations should be prepared for based on identified risks.

Auditors should be able to trace a line from planning to operation. If the aspect register identifies a significant spill risk, the auditor should expect to find suitable spill controls in operation.

Lifecycle thinking in Clause 8

Clause 8 is where lifecycle perspective becomes very practical.

The organisation should consider where it can control or influence environmental impacts across relevant lifecycle stages.

This may include:

  • design and development;
  • procurement;
  • supplier selection;
  • materials and packaging;
  • production or service delivery;
  • transport and distribution;
  • customer use of products;
  • maintenance;
  • end-of-life treatment, reuse, recycling or disposal.

The organisation does not need to control every lifecycle stage. It should consider where it has control, where it has influence, and what operational arrangements are appropriate.

Control and influence in operation

Operational control is not limited to activities directly performed by employees.

The organisation may need to manage environmental outcomes through:

  • contractor rules;
  • supplier requirements;
  • procurement specifications;
  • design choices;
  • customer information;
  • outsourced process controls;
  • service-level agreements;
  • environmental clauses in contracts;
  • inspection and monitoring of external providers.

This is especially important where an external provider performs work that can affect environmental performance or compliance obligations.

Documented information in Clause 8

Clause 8 often requires documented information to support consistent control and provide evidence that processes are being carried out as planned.

Examples may include:

  • operational procedures;
  • work instructions;
  • inspection records;
  • maintenance records;
  • contractor induction records;
  • supplier approval records;
  • waste transfer records;
  • monitoring records;
  • emergency response plans;
  • spill drill records;
  • incident reports;
  • change-control records.

The level of documentation should be proportionate to the environmental risk and complexity of the process.

What auditors typically look for in Clause 8

Auditors look for evidence that operational controls and emergency arrangements are planned, implemented and maintained.

Evidence may include:

  • operational control procedures;
  • work instructions;
  • site observations;
  • aspect and impact register;
  • compliance obligation records;
  • risk and opportunity records;
  • contractor and supplier controls;
  • procurement requirements;
  • inspection and maintenance records;
  • monitoring records;
  • emergency response plans;
  • spill kits or emergency equipment checks;
  • emergency drill records;
  • incident records and corrective actions;
  • interviews with employees, contractors and process owners.

Auditor tip

Clause 8 is best audited on the ground. Walk the process, observe controls, speak to people, and compare what is actually happening with the EMS arrangements. The procedure may say one thing; the loading bay may say another.

Common weaknesses in Clause 8

  • operational controls are not linked to significant environmental aspects;
  • procedures exist but are not followed in practice;
  • contractors are not controlled effectively;
  • outsourced processes affecting environmental performance are ignored;
  • lifecycle considerations are mentioned but not applied operationally;
  • procurement does not reflect environmental requirements;
  • emergency scenarios are incomplete or outdated;
  • emergency response plans are not tested where practicable;
  • spill kits or emergency equipment are missing, inaccessible or unchecked;
  • changes to processes are made without updating controls;
  • records do not show that controls have operated as planned.

Weak example

“The organisation controls environmental risks through procedures and emergency plans.”

This is weak because it does not show which risks are controlled, whether the controls are implemented, whether people understand them, whether contractors are covered, or whether emergency response arrangements work in practice.

Better example

“The organisation has identified significant environmental aspects and related operational controls. Chemical storage is controlled through bunding, inspections, spill kits, staff training and contractor rules. Waste is controlled through segregation, licensed carriers and transfer records. Emergency arrangements are tested and reviewed after drills or incidents.”

This is stronger because it connects EMS planning to practical operational controls and evidence.

Real-world example: manufacturing site

A manufacturing site identifies chemical storage, solvent emissions, waste handling and equipment maintenance as important EMS issues.

Clause 8 controls may include:

  • bunded chemical storage;
  • segregated waste areas;
  • approved waste contractors;
  • maintenance of extraction or filtration equipment;
  • operator work instructions;
  • contractor permits-to-work;
  • emergency response plans;
  • spill-kit inspections;
  • emergency drills;
  • monitoring of emissions or waste movements.

An auditor could test Clause 8 by reviewing the aspect register, then walking the site to check whether the planned controls are visible and effective.

Real-world example: office-based organisation

An office-based organisation may have simpler operational controls, but Clause 8 still applies.

Controls may include:

  • waste and recycling arrangements;
  • energy-saving routines;
  • procurement controls for IT equipment and supplies;
  • business travel controls;
  • approved routes for IT equipment disposal;
  • contractor rules for cleaning or maintenance providers;
  • emergency arrangements for fire, flood or building incidents.

Operational control should be proportionate to the organisation’s context, aspects and compliance obligations.

Auditor questions for ISO 14001 Clause 8

  • What operational controls are needed for significant environmental aspects?
  • How are compliance obligations built into operational controls?
  • How does the organisation control outsourced processes?
  • How are contractors informed of environmental requirements?
  • How are procurement and supplier requirements managed?
  • How is lifecycle perspective applied in operation?
  • How does the organisation control planned changes?
  • What emergency situations have been identified?
  • How does the organisation prepare for and respond to emergencies?
  • Are emergency response arrangements tested where practicable?
  • How are emergency arrangements reviewed after tests or incidents?
  • What evidence shows operational controls are implemented as planned?

Related ISO 14001 clauses

  • Clause 6.1.2 — Environmental aspects
  • Clause 6.1.3 — Compliance obligations
  • Clause 6.1.4 — Risks and opportunities
  • Clause 6.1.5 — Planning action
  • Clause 6.3 — Planning of changes
  • Clause 7.2 — Competence
  • Clause 7.3 — Awareness
  • Clause 7.4 — Communication
  • Clause 7.5 — Documented information
  • Clause 9.1 — Monitoring, measurement, analysis and evaluation
  • Clause 9.2 — Internal audit
  • Clause 10.2 — Nonconformity and corrective action

Continue learning

This page is part of SQMC’s ISO 14001:2026 guidance library for auditors, managers and QHSE professionals.

Ready to put ISO 14001 into practice?

SQMC’s ISO 14001 Internal Auditor course helps you move from understanding the Standard to auditing it with confidence. Over two practical days, you’ll learn how to plan EMS audits, gather evidence, ask better questions, write nonconformities and report findings clearly.

Learn from anywhere in our Virtual Classroom, attend one of our training centres, or arrange private in-company training for your team.

Find out more and get qualified!