Skip to content
All posts

ISO 14001:2026 Clause 8.1

ISO 14001:2026 for Auditors > Clause 8.1

Explained: Operational Planning and Control

Clause 8.1 of ISO 14001 asks an organisation to plan, implement and control the processes needed to meet EMS requirements and carry out planned actions. In plain English, this means the organisation must control the activities, products, services, contractors, suppliers and lifecycle issues that can affect environmental performance.

What is ISO 14001 Clause 8.1 trying to achieve?

Clause 8.1 is about controlling the work that matters to the Environmental Management System.

It takes the planning work from Clause 6 and turns it into day-to-day operational arrangements.

The organisation should establish, implement, control and maintain the processes needed to:

  • meet EMS requirements;
  • address significant environmental aspects;
  • meet compliance obligations;
  • manage risks and opportunities;
  • achieve environmental objectives;
  • control planned changes;
  • manage outsourced or externally provided processes where relevant;
  • apply lifecycle thinking where the organisation has control or influence.

The aim is not to produce a pile of procedures. The aim is to ensure environmentally important work is carried out under controlled conditions.

Why operational planning and control matters in an EMS

Environmental performance is affected by what actually happens in the workplace.

Planning identifies what matters. Operational control makes sure it is managed.

Without effective operational control:

  • waste may be incorrectly segregated;
  • chemicals may be stored unsafely;
  • contractors may create pollution risks;
  • permits or legal requirements may be breached;
  • energy or water use may be poorly controlled;
  • spill risks may not be managed;
  • suppliers may undermine lifecycle commitments;
  • environmental objectives may not be achieved.

Clause 8.1 is therefore one of the most practical and audit-rich parts of ISO 14001.

What does ISO 14001 expect?

ISO 14001 expects the organisation to plan and control processes needed for the EMS.

In practical terms, the organisation should:

  • identify which processes need control;
  • establish criteria for those processes where needed;
  • implement controls in line with those criteria;
  • keep appropriate documented information as evidence that processes are carried out as planned;
  • control planned changes and review unintended changes;
  • ensure outsourced processes are controlled or influenced;
  • consider lifecycle perspective in procurement, design, delivery, use and end-of-life stages where relevant.

The exact controls should be proportionate to the organisation’s environmental aspects, compliance obligations, risks, opportunities and operational complexity.

Operational controls should follow from environmental aspects

Operational controls should be linked to environmental aspects and impacts.

If the organisation has identified a significant environmental aspect, the auditor should expect to see appropriate control arrangements.

Examples include:

  • chemical storage controls for spill and contamination risks;
  • waste segregation controls for waste impacts and legal duties;
  • maintenance controls for equipment that affects emissions or energy use;
  • driver controls for fuel use and transport emissions;
  • procurement controls for high-impact materials or suppliers;
  • contractor controls for activities that could affect the environment.

A strong EMS should allow auditors to trace the link from aspect to impact, then to control, evidence and improvement.

Operational controls and compliance obligations

Compliance obligations should be built into operational control.

Legal, permit, customer, contractual or voluntary requirements should not sit separately in a register while day-to-day operations carry on as before.

Examples include:

  • permit limits built into monitoring plans;
  • waste legislation reflected in segregation, storage and transfer controls;
  • chemical storage requirements reflected in inspection routines;
  • customer carbon-reporting requirements reflected in data collection processes;
  • contractor requirements reflected in induction and permit-to-work systems;
  • planning conditions reflected in noise, traffic or operating-hour controls.

Simple example

If a site must retain waste transfer records, the operational process should define who checks the waste carrier, who receives the documentation, where records are stored and how long they are retained.

Establishing criteria for operational processes

Clause 8.1 expects the organisation to establish criteria for processes where needed.

Criteria are the rules, limits, standards or expectations that define how a process should be controlled.

Examples include:

  • storage requirements for chemicals;
  • inspection frequencies for bunds, tanks or spill kits;
  • acceptable waste segregation arrangements;
  • maintenance intervals for environmental control equipment;
  • permit conditions or emission limits;
  • supplier approval criteria;
  • contractor induction requirements;
  • shutdown routines for energy management;
  • minimum requirements for packaging or materials;
  • monitoring frequencies and responsibilities.

Criteria help people understand what acceptable control looks like.

Types of operational control

Operational controls can take many forms. They do not always need to be written procedures.

Examples include:

  • physical controls, such as bunding, containment or shut-off valves;
  • engineering controls, such as filtration, extraction or metering systems;
  • procedures and work instructions;
  • inspection and maintenance schedules;
  • competence and training requirements;
  • signage and labelling;
  • contractor controls;
  • procurement specifications;
  • supplier approval processes;
  • monitoring and measurement;
  • emergency equipment;
  • digital systems, alerts or checklists.

The best controls are usually practical, visible and understood by the people who use them.

Control of planned and unintended changes

Clause 8.1 expects the organisation to control planned changes and review unintended changes.

Planned changes may include:

  • new equipment;
  • new materials or chemicals;
  • new suppliers;
  • new contractors;
  • site layout changes;
  • new products or services;
  • changes to working patterns;
  • process modifications;
  • changes to operational controls.

Unintended changes may include process drift, temporary workarounds, equipment failure, unexpected staffing changes or contractors carrying out work differently from what was planned.

The organisation should review unintended changes and take action to reduce negative environmental effects where needed.

Outsourced processes and external providers

Clause 8.1 requires the organisation to control or influence outsourced processes where they affect the EMS.

Outsourced or externally provided processes may include:

  • waste collection and disposal;
  • equipment maintenance;
  • cleaning services;
  • transport and logistics;
  • chemical supply;
  • contract manufacturing;
  • facilities management;
  • environmental monitoring;
  • construction or refurbishment work;
  • IT equipment disposal.

The organisation may not directly control every external provider, but it should understand where influence is needed and what arrangements are appropriate.

This may include supplier approval, contract requirements, environmental clauses, inductions, performance monitoring, audits, inspections or review meetings.

Lifecycle thinking in operational control

Clause 8.1 is one of the key places where lifecycle thinking becomes operational.

The organisation should consider the environmental impacts it can control or influence across relevant lifecycle stages.

These stages may include:

  • design and development;
  • raw material selection;
  • procurement;
  • supplier activity;
  • manufacturing or service delivery;
  • packaging;
  • storage and distribution;
  • customer use;
  • maintenance or support;
  • reuse, recycling or disposal.

This does not mean the organisation controls the entire lifecycle. It means the organisation should consider where it has authority, influence or practical ability to reduce impacts or improve environmental performance.

Procurement and supplier influence

Procurement is often a major route for lifecycle influence.

Environmental considerations in procurement may include:

  • material selection;
  • packaging requirements;
  • recyclability;
  • energy efficiency;
  • durability and repairability;
  • supplier environmental performance;
  • transport distance or delivery method;
  • waste disposal requirements;
  • evidence of compliance or certification;
  • chemical content or restricted substances.

Auditors should check whether procurement controls reflect the organisation’s significant aspects, compliance obligations and lifecycle considerations.

Design and development controls

Where design and development are relevant to the EMS scope, environmental controls may need to be built into design decisions.

Design choices can affect:

  • materials used;
  • energy efficiency;
  • water use;
  • packaging;
  • transport impacts;
  • use-phase impacts;
  • maintenance needs;
  • repairability;
  • end-of-life disposal;
  • recycling or reuse potential.

If an organisation designs products, services, packaging or processes, auditors should check whether environmental considerations are included at appropriate design stages.

Information for external providers and customers

The organisation may need to communicate relevant environmental requirements to external providers and, where appropriate, customers or end users.

This may include:

  • supplier environmental requirements;
  • contractor site rules;
  • packaging or delivery requirements;
  • waste disposal instructions;
  • safe use or maintenance information;
  • end-of-life recycling or disposal guidance;
  • requirements for environmental data or reporting;
  • incident reporting arrangements.

Communication should be clear enough that external parties understand what is expected of them.

Documented information for operational control

The organisation should retain documented information to the extent needed to have confidence that operational controls are carried out as planned.

Evidence may include:

  • procedures;
  • work instructions;
  • inspection checklists;
  • maintenance records;
  • monitoring records;
  • supplier approval records;
  • contractor induction records;
  • permits-to-work;
  • procurement specifications;
  • waste transfer documentation;
  • change-control records;
  • records of operational nonconformities or corrective actions.

Documentation should support control. If nobody uses it, understands it or keeps it current, it is probably not doing its job.

Practical implementation guidance

A practical approach to Clause 8.1 may include:

  • identifying processes linked to significant aspects and compliance obligations;
  • deciding what controls are needed;
  • defining operating criteria where necessary;
  • communicating controls to relevant people;
  • training or briefing employees and contractors;
  • controlling outsourced processes and external providers;
  • applying lifecycle thinking to design, procurement, suppliers and end-of-life issues where relevant;
  • retaining records showing controls were applied;
  • reviewing controls after changes, incidents, audits or performance issues.

The organisation should be able to show that operational controls are not just documented, but implemented and maintained.

What auditors typically look for

Auditors look for evidence that operational controls are planned, implemented, maintained and effective.

Evidence may include:

  • aspect and impact register;
  • compliance obligations register;
  • risk and opportunity records;
  • operational procedures;
  • work instructions;
  • site walkaround observations;
  • inspection and maintenance records;
  • contractor and supplier controls;
  • procurement specifications;
  • training and awareness records;
  • monitoring and measurement records;
  • waste documentation;
  • change-management records;
  • interviews with employees, contractors and process owners.

Auditor tip

Clause 8.1 is best audited by following the process. Start with a significant aspect, then check the controls in the workplace. Ask people what they do, observe whether it happens, and compare the evidence against the documented arrangements.

Common weaknesses in Clause 8.1

  • operational controls are not linked to significant aspects;
  • procedures exist but are not followed;
  • operating criteria are unclear;
  • compliance obligations are not built into day-to-day controls;
  • contractors are not properly controlled;
  • outsourced processes are ignored;
  • procurement does not reflect environmental requirements;
  • lifecycle thinking is mentioned but not applied;
  • planned changes are not controlled;
  • unintended changes are not reviewed;
  • records do not show that controls were implemented as planned;
  • people carrying out controlled processes do not understand the requirements.

Weak example

“Environmental controls are described in procedures and communicated to staff.”

This is weak because it does not show which controls apply to which aspects, whether operating criteria are defined, whether controls are followed, whether external providers are included, or whether evidence exists.

Better example

“The organisation links significant environmental aspects to operational controls. Chemical storage is controlled through bunding, segregation, inspections and spill-response arrangements. Waste is controlled through labelled containers, approved carriers and transfer records. Contractors receive site rules before work starts, and supplier requirements include relevant environmental criteria.”

This is stronger because it connects planning, controls, external providers, evidence and operational reality.

Real-world example: warehouse and distribution company

A warehouse and distribution company identifies fuel use, packaging waste, spill risk and waste segregation as important EMS issues.

Operational controls may include:

  • driver route planning and vehicle checks;
  • fuel monitoring;
  • segregated waste containers;
  • supplier packaging requirements;
  • spill kits at loading bays;
  • inspection checks for storage areas;
  • contractor induction for maintenance providers;
  • waste contractor approval and documentation checks;
  • supervisor checks on loading and waste areas.

An auditor could test this by reviewing the aspect register, walking the warehouse, interviewing supervisors and checking fuel, waste and inspection records.

Real-world example: manufacturing site

A manufacturing site identifies emissions, chemical storage, waste handling and equipment maintenance as significant environmental aspects.

Operational controls may include:

  • operating instructions for emission-control equipment;
  • preventive maintenance for extraction systems;
  • chemical storage requirements;
  • bund and tank inspections;
  • waste segregation and labelling;
  • approved waste contractors;
  • monitoring of emissions or discharges;
  • training for operators and maintenance teams;
  • contractor permits-to-work;
  • change review before new materials or processes are introduced.

This shows how Clause 8.1 turns significant aspects and compliance obligations into practical controls.

Auditor questions for ISO 14001 Clause 8.1

  • What operational controls are needed for significant environmental aspects?
  • How are operating criteria established?
  • How are controls implemented and maintained?
  • How are compliance obligations built into operational controls?
  • What documented information shows processes are carried out as planned?
  • How are planned changes controlled?
  • How are unintended changes reviewed?
  • How are outsourced processes controlled or influenced?
  • How are contractors and suppliers controlled?
  • How is lifecycle perspective applied to operations, procurement or design?
  • How are relevant requirements communicated to external providers?
  • Can people explain the operational controls relevant to their work?
  • Can the organisation show evidence that controls are working?

Related ISO 14001 clauses

  • Clause 6.1.2 — Environmental aspects
  • Clause 6.1.3 — Compliance obligations
  • Clause 6.1.4 — Risks and opportunities
  • Clause 6.1.5 — Planning action
  • Clause 6.3 — Planning of changes
  • Clause 7.2 — Competence
  • Clause 7.3 — Awareness
  • Clause 7.4 — Communication
  • Clause 7.5 — Documented information
  • Clause 8.2 — Emergency preparedness and response
  • Clause 9.1 — Monitoring, measurement, analysis and evaluation
  • Clause 9.2 — Internal audit
  • Clause 10.2 — Nonconformity and corrective action

Continue learning

This page is part of SQMC’s ISO 14001:2026 guidance library for auditors, managers and QHSE professionals.

Ready to put ISO 14001 into practice?


SQMC’s ISO 14001 Internal Auditor course helps you move from understanding the Standard to auditing it with confidence. Over two practical days, you’ll learn how to plan EMS audits, gather evidence, ask better questions, write nonconformities and report findings clearly.

Learn from anywhere in our Virtual Classroom, attend one of our training centres, or arrange private in-company training for your team.

Find out more and get qualified!