ISO 14001:2026 Internal Audit Checklist: What Should Auditors Check?
By Mathew Chiweda, Co-founder & Managing Director, iAudit Global
TL;DR
An ISO 14001:2026 internal audit checklist should help auditors assess more than whether documents exist. It should guide the review of environmental aspects, compliance obligations, leadership, operational controls, environmental performance, corrective actions and continual improvement.
Auditors should verify evidence through documents, interviews and site observations, with particular attention to areas affected by the 2026 requirements, including environmental context, climate change, biodiversity, lifecycle thinking and planned changes.
A practical checklist can help identify gaps before an internal or certification audit. Use the ISO 14001:2026 checklist from iAudit Global to assess your current position and identify areas requiring further attention.
An ISO 14001:2026 internal audit checklist should do more than remind an auditor which clauses to cover. It should help establish whether an organisation's Environmental Management System (EMS) is implemented, effective and appropriate to its actual environmental risks and activities.
As an auditor, I use a checklist as a guide rather than a script. The evidence gathered during the audit should determine where I investigate further.
The 2026 edition also gives organisations some areas that deserve closer attention, including environmental context, climate change, biodiversity, lifecycle thinking, planning of changes and external providers.
What should an ISO 14001:2026 internal audit checklist cover?
A useful checklist should cover the requirements of the standard while also reflecting the organisation's processes, environmental aspects, risks and operational controls.
At a minimum, I would expect an internal audit to examine:
Context of the organisation
Leadership
Planning
Support
Operation
Performance evaluation
Improvement
The important point is not simply to confirm that each requirement has a corresponding document. The auditor needs to establish whether the system works in practice.
1. Context of the organisation
Start by understanding the organisation and the environmental conditions that could affect its EMS.
I would check:
- ✓
Has the organisation identified relevant internal and external issues?
- ✓
Has it considered relevant environmental conditions?
- ✓
Are climate change, pollution, biodiversity, ecosystem health and resource availability considered where relevant?
- ✓
Have relevant interested parties and their requirements been identified?
- ✓
Is the scope of the EMS appropriate?
For example, a manufacturing site may need to consider water availability, extreme weather, pollution or the sensitivity of the surrounding environment.
The key audit question is simple: Have the organisation's actual environmental circumstances been properly considered?
The 2026 edition places greater visibility on these environmental conditions, so an unchanged context review deserves closer examination.
2. Leadership
An environmental policy on its own does not demonstrate effective leadership.
I would look for evidence that top management is involved in the EMS and that environmental considerations are integrated into relevant business processes.
The checklist should ask:
- ✓
Is the environmental policy appropriate to the organisation?
- ✓
Are responsibilities and authorities clearly assigned?
- ✓
Can management demonstrate involvement in environmental performance?
- ✓
Are environmental objectives connected to organisational priorities?
- ✓
Are people given the resources needed to maintain the EMS?
Interviews are particularly useful here. What management says about environmental priorities should be consistent with what is happening elsewhere in the organisation.
3. Planning
Planning is one of the areas I would examine closely because several parts of the EMS need to connect.
The audit should cover:
Environmental aspects and impacts
Significant environmental aspects
Compliance obligations
Risks and opportunities
Environmental objectives
Plans for achieving objectives
Planning of changes
The 2026 edition makes planning of changes more explicit through Clause 6.3. That means I would sample recent changes such as new machinery, changes to materials, site expansion, new processes or significant supplier changes and ask whether their environmental implications were considered before implementation.
I would also check whether the organisation's environmental aspects actually inform its risks, objectives and operational controls. An EMS should operate as a connected system rather than a collection of separate registers.
4. Support
The next question is whether people have the competence, information and resources needed to operate the EMS effectively.
An internal audit checklist should cover:
- ✓
Resources
- ✓
Competence
- ✓
Training
- ✓
Awareness
- ✓
Communication
- ✓
Documented information
Do not rely entirely on training records. Talk to employees who perform environmentally significant activities.
Can they explain their responsibilities? Do they understand the environmental consequences of their work? Do they know what to do if a control fails?
Those conversations can provide evidence that a documented process is actually understood and implemented.
5. Operation
This is where I would move beyond the paperwork and look at what is happening on site.
The exact checklist will depend on the organisation, but operational controls could include:
Waste management
Emissions
Water consumption and discharge
Energy use
Chemical and hazardous material handling
Storage arrangements
Contractor controls
Procurement
Maintenance activities
Emergency preparedness and response
Lifecycle thinking also needs to be considered. This was already part of ISO 14001:2015, but its application is clearer in the 2026 edition. Depending on the organisation, this could mean looking at procurement, raw materials, suppliers, transport, product use, waste and end-of-life stages.
The auditor is not expected to control every part of a supply chain. The question is where the organisation can control or influence environmental impacts.
6. Performance evaluation
A good EMS should provide evidence that environmental performance is being monitored and evaluated.
I would check:
- ✓
What environmental performance is monitored?
- ✓
Are monitoring and measurement methods appropriate?
- ✓
Are results analysed and evaluated?
- ✓
Are compliance obligations evaluated?
- ✓
Is the internal audit programme effective?
- ✓
Is management review receiving relevant information about EMS performance?
For internal audits themselves, the 2026 edition provides greater clarity around audit objectives. I would therefore review whether audits have clear objectives, appropriate scope and criteria, sufficient evidence and meaningful findings.
A useful question is: How does the organisation know that its EMS is working?
7. Improvement
Finally, the checklist should establish how the organisation responds when something does not go as planned.
Look for evidence of:
Nonconformity identification
Correction
Root-cause analysis
Corrective action
Effectiveness checks
Continual improvement
I would not consider a corrective action closed simply because someone has completed an action on a tracker.
If a procedure was changed, for example, I would want to know whether the revised process is actually being followed and whether it has addressed the original problem.
What evidence should an auditor collect?
A strong internal audit normally draws on several types of evidence.
Documents and records
Documents and records can include policies, aspects registers, compliance evaluations, objectives, monitoring results, audit reports, management reviews and corrective-action records.
Interviews
Interviews help establish whether employees understand and follow the processes that affect environmental performance.
Observation
Observation allows the auditor to see whether documented controls exist in practice. Site inspections can reveal issues that would not be apparent from reviewing records alone.
I find it useful to think of the process as:
If an employee explains how a control works, observe it where possible. Then verify the supporting evidence and trace it back to the relevant requirement or objective.
Do you need to update your ISO 14001 audit checklist for 2026?
If you are moving from ISO 14001:2015 to ISO 14001:2026, I would not simply change clause references on an existing checklist.
The revised standard includes areas that should be reflected in your audit programme, including environmental context, lifecycle considerations, planning of changes, external providers and clearer internal audit objectives.
Before revising the checklist, it can be useful to carry out an ISO 14001:2026 gap analysis. A gap analysis establishes where your existing EMS differs from the revised requirements, while an internal audit then evaluates whether the system is implemented and effective.
It is also worth understanding the changes introduced in ISO 14001:2026 before deciding what needs to change in your audit programme.
Turn the checklist into useful audit results
The value of an internal audit is not the completed checklist. It is what the organisation learns from the evidence.
Each finding should be supported by objective evidence and linked to the relevant requirement. Where corrective action is required, it should have an owner, a target date and a defined method for verifying effectiveness.
That creates a useful connection between the audit and the wider PDCA cycle.
At iAudit Global, we built our audit management platform around this workflow, from audit planning and evidence capture through to findings, corrective actions and reporting. The aim is to keep the audit process connected rather than leaving evidence and follow-up across separate spreadsheets and documents.