ISO 14001 internal audits: what do they involve?

An ISO 14001 internal audit is a planned, objective review of your environmental management system (EMS) to establish whether it meets both ISO 14001 and your organisation’s own requirements, and whether the system is effectively implemented and maintained. Internal audits should examine evidence of how the EMS works in practice, not simply whether the correct documents exist.

What is an ISO 14001 internal audit?

Internal auditing is an important part of maintaining an effective ISO 14001 environmental management system.

It gives your organisation an opportunity to examine its own EMS systematically, identify where requirements are not being met and establish whether the processes and controls you have put in place are actually working.

Despite the name, an internal audit does not necessarily have to be carried out by one of your own employees. It can also be undertaken by an external person on your organisation’s behalf, provided the audit remains objective and impartial.

An internal audit is also different from the external audits carried out by your certification body. Its purpose is to help your organisation evaluate and improve its own environmental management system.

What does ISO 14001 require for internal audits?

Internal audit sits within Clause 9 – Performance Evaluation of ISO 14001.

Organisations are required to conduct internal audits at planned intervals and maintain an audit programme.

Under ISO 14001:2026, this includes establishing:

• The frequency and methods of audits
• Responsibilities
• Planning requirements
• Reporting arrangements
• Objectives for each audit
• Audit criteria
• Audit scope
• Appropriate auditors who can maintain objectivity and impartiality

Audit results need to be reported to relevant management, and documented information should be retained as evidence that the audit programme has been implemented and of the results obtained.

The standard does not prescribe a universal timetable or identical audit schedule for every organisation. Your programme should reflect your organisation and environmental management system rather than simply following an arbitrary calendar.

What should an ISO 14001 internal audit cover?

The precise scope depends on what is being audited.

Across an audit programme, however, you will need to establish whether your environmental management system conforms to ISO 14001 and to the requirements your organisation has established for its own EMS.

That can involve examining areas such as:

• Environmental aspects and impacts
• Compliance obligations
• Environmental objectives
• Operational controls
• Waste management
• Energy and resource use
• Chemical controls where applicable
• Emergency preparedness and response
• Competence and awareness
• Monitoring and measurement
• Documented information
• Corrective actions
• Previous audit findings

The important point is that an internal audit should not become a paperwork exercise.

A documented procedure may look excellent, but the audit also needs to establish whether it reflects what actually happens within the organisation and whether the relevant controls are working effectively.

What happens during an internal audit?

An effective internal audit normally begins with planning.

The auditor establishes the objective, scope and criteria for the audit and identifies the processes, activities and evidence that need to be examined.

The audit itself can involve a combination of:

• Reviewing policies, procedures and records
• Speaking to employees and managers
• Observing activities and working practices
• Examining evidence that environmental controls are being followed
• Following up previous findings and corrective actions

The auditor then evaluates the evidence against the relevant audit criteria and records the findings.

Those findings should be reported to the appropriate people within the organisation so that any required action can be taken.

Is an ISO 14001 internal audit just a compliance check?

No.

An internal audit should determine whether the EMS conforms to ISO 14001 and your organisation’s own environmental management system requirements, and whether it is effectively implemented and maintained.

That is not the same thing as carrying out a standalone legal compliance audit.

Your organisation does need processes for understanding and evaluating its environmental compliance obligations, and these arrangements can form part of the EMS being audited. But the purpose of the ISO 14001 internal audit itself is to evaluate the environmental management system.

This distinction matters because a good internal audit looks at the effectiveness of the system rather than simply working through a list of environmental legislation.

Who can carry out an ISO 14001 internal audit?

ISO 14001 requires the audit process to be objective and impartial.

That means organisations need to consider who is appropriate to audit each area of the environmental management system.

Some businesses develop suitable internal auditing competence among their own employees. Others use external support, particularly where:

• Internal resources are limited
• The EMS is complex
• Suitable independence is difficult to achieve internally
• Specialist environmental knowledge is required
• An external perspective would be useful
• The organisation is preparing for an external surveillance or recertification audit

The important consideration is not whether the auditor is employed by your business, but whether the audit can be conducted competently, objectively and impartially.

How often should ISO 14001 internal audits be carried out?

ISO 14001 requires audits to take place at planned intervals, but it does not prescribe a single frequency that every organisation must follow.

Your internal audit programme should consider the importance of the processes concerned and the results of previous audits.

This means different areas of an environmental management system do not necessarily need to be audited with exactly the same frequency.

An area with significant environmental implications or a history of problems may warrant greater attention than a mature, lower-risk process that has consistently performed well.

The aim should be to create an audit programme that gives the organisation useful assurance about its EMS, rather than auditing once a year simply because the calendar says so.

What happens when an internal audit finds a problem?

Finding a problem during an internal audit is not evidence that the audit has failed.

Identifying weaknesses before they develop further is one of the reasons internal audits exist.

Where a nonconformity is identified, the organisation should establish what needs to be corrected and consider its cause so that appropriate corrective action can be taken.

The effectiveness of that action should then be evaluated.

Simply closing an audit finding because a document has been changed misses the point if the underlying problem still exists in practice.

Internal audits and ISO 14001:2026

The 2026 edition of ISO 14001 retains internal auditing within Clause 9 but strengthens the emphasis on effective performance evaluation.

One notable clarification is that objectives now need to be defined for each internal audit, alongside its criteria and scope.

For organisations transitioning from ISO 14001:2015, the internal audit programme is therefore one of the areas worth reviewing as part of transition preparation.

This is also an opportunity to ask a broader question: is your audit programme genuinely helping you understand whether your EMS is effective, or has it gradually become a routine compliance exercise?

How JVR can support ISO 14001 internal audits

JVR Consultancy supports organisations operating and maintaining ISO management systems, including ISO 14001 environmental management systems.

Our support can include reviewing your existing audit programme, conducting internal audits on your behalf, identifying gaps and nonconformities, helping address corrective actions and preparing your organisation for external surveillance or recertification audits.

The approach is practical. The objective is not simply to produce an audit report, but to establish whether your environmental management system reflects how your organisation actually operates and identify where improvements are genuinely required.

For organisations transitioning to ISO 14001:2026, JVR can also help review existing management systems and internal audit arrangements against the current requirements.

Need support maintaining your ISO 14001 management system?

Internal auditing is only one part of maintaining an effective environmental management system.

If you need support carrying out internal audits, maintaining your management system or preparing for an external audit, JVR Consultancy can help.

Find out more about our Ongoing ISO 14001 Support & Maintenance and Support During Audit services, or contact JVR Consultancy to discuss your requirements.