ISO 14001:2015 Environmental management systems – Requirements with guidance for use
8.1 Operational planning and control
The organization shall establish, implement, control and maintain the processes needed to meet environmental management system requirements, and to implement the actions identified in 6 .1 and 6.2, by :
NOTE Controls can include engineering controls and procedures. Controls can be implemented following a hierarchy (e.g. elimination, substitution, administrative) and can be used individually or in combination.
The organization shall control planned changes and review the consequences of unintended changes, taking action to mitigate any adverse effects, as necessary.
The organization shall ensure that (an) outsourced process(es) is (are) controlled or influenced. The type and extent of control or influence to be applied to the process(es) shall be defined within the environmental management system.
Consistent with a life cycle perspective, the organization shall:
The organization shall maintain documented information to the extent necessary to have confidence that the process(es) has (have) been carried out as planned.
A.8.1 Operational planning and control
The type and extent of operational control(s) depend on the nature of the operations, the risks and opportunities, significant environmental aspects and compliance obligations. An organization has the flexibility to select the type of operational control methods, individually or in combination, that are necessary to make sure the process(es) is (are) effective and achieve(s) the desired results. Such methods can include:
The organization decides the extent of control needed within its own business processes (e.g. procurement process) to control or influence (an) outsourced process(es) or (a) provider(s) of products and services. Its decision should be based upon factors such as:
environmental management system requirements;
- the technical competence of the organization to define appropriate
controls or assess the adequacy of controls;
When a process is outsourced, or when products and services are supplied by (an) external provider(s), the organization’s ability to exert control or influence can vary from direct control to limited or no influence. In some cases, an outsourced process performed onsite might be under the direct control of an organization; in other cases, an organization’s ability to influence an outsourced process or external supplier might be limited.
When determining the type and extent of operational controls related to external providers, including contractors, the organization may consider one or more factors such as:
For information on operational control as part of managing change, see Clause A.1. For information on life cycle perspective, see A.6.1.2.
An outsourced process is one that fulfills all of the following:
Environmental requirements are the organization’s environmentally-related needs and expectations that it establishes for, and communicates to, its interested parties (e.g. an internal function, such as procurement; a customer; an external provider).
Some of the organization’s significant environmental impacts can occur during the transportation, delivery, use, end-of-life treatment or final disposal of its product or service. By providing information, an organization can potentially prevent or mitigate adverse environmental impacts during these life cycle stages.
8.2 Emergency preparedness and response
The organization shall establish, implement and maintain the processes needed to prepare for and respond to potential emergency situations identified in 6 .1.1.
The organization shall:
The organization shall maintain documented information to the extent necessary to have confidence that the process(es) is (are) carried out as planned.
A.8.2 Emergency preparedness and response
It is the responsibility of each organization to be prepared and to respond to emergency situations in a manner appropriate to its particular needs. For information on determining emergency situations, see A.6.1.1.
When planning its emergency preparedness and response process(es), the organization should consider: