ISO 14001 Consulting: What Implementation Involves

An ISO 14001 management system is only as good as the list of compliance obligations underneath it.

ISO 14001 is the international standard for environmental management systems. The weak spot is usually one specific place, where new systems most often go thin: the clause on compliance obligations, meaning the laws and regulations you must comply with. It was clause 6.1.3 in the 2015 edition and was renumbered in 2026, along with the rest of clause 6.

The standard requires you to determine which compliance obligations relate to your environmental aspects, to have access to them, and to account for them in your management system. In the United States, that is a real, specific and often long list:

• Clean Air Act permits and emissions inventories
• Your hazardous waste generator status and your waste determinations under the Resource Conservation and Recovery Act (RCRA)
• Clean Water Act requirements for stormwater and for Spill Prevention, Control and Countermeasure (SPCC) plans
• Toxics Release Inventory (TRI) reporting, the annual Form R filed with EPA
• State and county programs, which vary by where you operate

A list that says “applicable environmental regulations” and stops there will pass the document review at Stage 1 of the certification audit, but it will not survive Stage 2. That auditor will ask which of your operations triggers a review of whether you need a Title V permit (the major-source air permit), and whether you have checked your chemical quantities against the Form R reporting thresholds.

One item on that list is our own day job. We prepare and file Form R reports for facilities.

ISO 14001:2026: the standard changed in April

ISO 14001:2015 was withdrawn on April 15, 2026. The current edition is ISO 14001:2026, and every certified company must transition to it. The transition period is about 3 years, ending in 2029.

If you are certified, this affects you now. If you are implementing for the first time, build to the 2026 edition and skip the transition entirely.

See what changed in ISO 14001:2026 and what your transition looks like.

One caution: a great deal of the ISO 14001 guidance online still follows the 2015 edition and does not say so, so check the edition before you rely on any clause number.

What we do

A gap assessment. We compare your current practice with the standard, clause by clause, and give you a prioritized plan to close the gaps. If you already have EHS (environmental, health and safety) programs, much of the system already exists, and if you handle air permits and waste determinations, you do have them. The system is usually not missing, only undocumented.

Environmental aspects and impacts (clause 6.1.2). We identify them across your operations from a life cycle perspective, which means looking at the whole life of your products, and then we evaluate the significance of each one against defined criteria.

The 2026 edition puts more weight on upstream and downstream impacts, meaning those from what you purchase and from your product after it leaves. Guidance from certification bodies differs on how this arrives: it may be a note to clause 6.1.2 or part of the clause 4 requirement on the scope of your system, so confirm against the standard. Either way, an aspects list that stops at the fence line is the first thing to review.

Compliance obligations (the clause that was 6.1.3 under the 2015 edition and was renumbered in 2026). We base the list on the actual federal, state and county requirements that apply to your operations. → How to build a compliance obligations register for a US facility

Objectives, targets and operational controls (clauses 6.2 and 8.1). In the 2026 edition, clause 8.1 also extends to externally provided processes, products and services.

Emergency preparedness and response (clause 8.2). We tie it to the SPCC, contingency and emergency action plans you actually have, not to a separate parallel document.

An internal audit program and a management review (clauses 9.2 and 9.3). The management review is top management's review of the system. The 2026 edition adds a new requirement (clause 9.2.2) that each internal audit have its own stated objectives.

Certification support. We prepare you for the Stage 1 and Stage 2 audits and are on site during the audit, and afterward we help you close any nonconformities the auditor writes up. See what happens at the Stage 1 and Stage 2 audits.

Transition support for companies moving from the 2015 edition.

What we can't do, and neither can anyone else

We cannot issue your certificate, and neither can anyone else who builds your system.

The certificate comes from the certification body (also called a registrar), the outside company that audits you. Accredited certification bodies work under a requirement (ISO/IEC 17021-1, clause 5.2.5) that bars them, and any company under their control, from consulting on management systems. That bar has no time limit and no waiting period.

Where the consulting comes from a related company, the accepted remedy is a waiting period: the certification body does not certify that system for a minimum of 2 years after the consulting ends. The same minimum applies where the certification body conducted your internal audits (clause 5.2.6).

So you hire two companies, by design: one builds the system and the other certifies it. If a single provider offers both in one package, ask which accredited body issues the certificate and how the impartiality requirement is being met.

See the full explanation, including what certification bodies can still properly sell you.

Who this is for

This service is for manufacturers and other industrial facilities that already carry real environmental obligations (permits, waste, reporting) and now need a management system around them. Usually a customer asked for it, a parent company required it, or the requirement came down a supply chain.

We are a fit if you have real regulatory obligations and want a system that reflects how your plant actually runs, and you would rather have fewer documents that are true than more that are not.

We are not a fit if you want a certificate as quickly and as cheaply as possible, with the least change to how you operate. That is a different service, and others sell it for less. We would rather say so in the first conversation than halfway through a project.

Who does the work

To be plain about it: we do not hold an ISO lead auditor certificate, and we are not going to imply that we do. What we have is years of hands-on work with the environmental regulations your compliance obligations list has to cover, gained in Arizona aerospace, electronics and steel fabrication plants, and elsewhere.

Consulting carries no credential requirement. Auditor competence is a requirement on your certification body, under the same ISO/IEC 17021-1 requirements, and that is a different company doing a different job.