ISO 14001 · EMS

ISO 14001 Gap Analysis Checklist: 40 Questions Before Your First Audit

A gap analysis is the single most useful thing you can do before booking your ISO 14001 certification audit. It tells you exactly which clauses you're ready on, which need more work, and how much implementation time remains. Here are 40 questions across all 10 clauses — the same questions a TÜV auditor will ask at Stage 1.

Quick answer: An ISO 14001 gap analysis compares your current EMS against the standard's requirements clause by clause. The most common gaps in manufacturing are: no documented aspects and impacts register, missing significant aspect determination, no emergency preparedness procedure, and no formal management review record.

Key takeaways

  • ISO 14001:2015 has 10 clauses — only clauses 4–10 contain auditable requirements
  • The aspects and impacts register (Clause 6.1.2) is the most audited document in the standard
  • A gap analysis should be done before Stage 1, not after — Stage 1 findings cost time and re-audit fees
  • Clause 9.3 management review is the most commonly missing record in first-time certifications
  • Use this checklist to score each clause: 0 = not started, 1 = partial, 2 = fully in place

Want a scored baseline before diving in? Take our free ISO 14001 Readiness Assessment — it scores your EMS across 6 core elements in 3 minutes and tells you which gaps to close first. No email required.

Clauses 4 & 5 — Context and Leadership

Clause 4 — Context of the organisation

  1. Have you identified the internal and external issues relevant to your EMS (e.g. regulatory environment, community relations, energy costs, climate risk)?
  2. Have you identified interested parties (customers, regulators, local communities, employees, investors) and their relevant requirements?
  3. Is the scope of your EMS documented, specifying which sites, activities, products and services are covered?
  4. Is the boundary between in-scope and out-of-scope activities clearly justified and documented?

Clause 5 — Leadership

  1. Has top management formally appointed an EMS management representative or owner (even if it is themselves)?
  2. Is there a documented environmental policy that includes a commitment to continual improvement and compliance with legal obligations?
  3. Has the policy been communicated to all persons working for or on behalf of the organisation?
  4. Are environmental roles, responsibilities and authorities assigned and documented?

Clause 6 — Planning (the most critical section)

Clause 6 is where the majority of Stage 1 findings occur. The aspects and impacts register is the foundation of your entire EMS — if it is missing, incomplete, or uses inconsistent criteria, everything downstream is compromised.

Clause 6.1 — Actions to address risks and opportunities

  1. Have you identified all environmental aspects of your activities, products and services — including normal, abnormal and emergency operating conditions?
  2. Has each aspect been evaluated for its potential environmental impact (positive and negative)?
  3. Is there a documented, consistent methodology for determining which aspects are significant?
  4. Does the significant aspects list drive your operational controls, objectives, and training priorities?
  5. Have you identified all applicable legal requirements (permits, consents, regulations) and other requirements you subscribe to?
  6. Is there a process to track changes to legal requirements and update the EMS accordingly?
  7. Are the risks and opportunities arising from the context analysis (Clause 4.1) formally addressed in your EMS planning?

Clause 6.2 — Environmental objectives

  1. Are environmental objectives documented and measurable for relevant functions and levels?
  2. Are objectives consistent with the environmental policy and significant aspects?
  3. Is there a documented programme (action plan) for each objective, including who is responsible, what resources are needed, and by when?

Clause 7 — Support

Resources, competence, awareness, communication, documentation

  1. Are the resources needed for the EMS identified and provided?
  2. Are competence requirements defined for roles that could affect environmental performance?
  3. Are training records maintained, and do they cover environmental awareness for all personnel (including contractors)?
  4. Are persons aware of the environmental policy, their contribution to EMS effectiveness, and the consequences of non-conformance?
  5. Is there an internal and external communication procedure for EMS-relevant information?
  6. Is documented information (procedures, records) controlled — version-managed, accessible, and protected from unintended alteration?

Clause 8 — Operation

Clause 8.1 and 8.2 — Operational controls and emergency preparedness

  1. Are operational controls in place for each significant environmental aspect (work instructions, permits, SOPs)?
  2. Are contractor and supplier controls defined for activities that can cause significant environmental impacts?
  3. Is there a documented emergency preparedness and response procedure?
  4. Does the procedure cover credible emergency scenarios (spill, fire, flood, power failure) specific to your facility?
  5. Have emergency response procedures been tested (drills) and are drill records maintained?
  6. Are emergency contacts, equipment locations, and response roles clearly documented and communicated to relevant personnel?
High-risk gap: Emergency preparedness Clause 8.2 is cited in approximately 30% of first-time ISO 14001 audits as a non-conformance. Many manufacturers have a generic fire evacuation plan but no documented environmental emergency procedure — covering spills, chemical releases, or wastewater bypass events.

Clause 9 — Performance Evaluation

Monitoring, internal audit, management review

  1. Are environmental performance indicators defined and measured at planned intervals?
  2. Is there a documented procedure for monitoring and measuring — including calibration of equipment and retention of records?
  3. Is there a process for evaluating compliance with legal and other requirements, including a record of the evaluation?
  4. Has at least one internal EMS audit been conducted (required before Stage 2)?
  5. Are internal auditors competent and independent from the areas they audit?
  6. Has at least one management review meeting been conducted and formally recorded?
  7. Does the management review record address all the required inputs (performance data, audit results, objectives progress, interested party concerns) and document outputs (decisions and actions)?

Clause 10 — Improvement

Nonconformity, corrective action, continual improvement

  1. Is there a documented procedure for identifying and managing nonconformities and corrective actions?
  2. Are corrective action records maintained and do they include root cause analysis, actions taken, and effectiveness verification?
  3. Is there evidence of continual improvement — objectives being revised, performance trends tracked, or system enhancements documented?

How to use this checklist

Score each question: 2 = fully in place with records, 1 = partially in place, 0 = not started or not documented. Total score out of 80.

Score rangeInterpretationTypical time to Stage 2
65–80Ready — minor documentation tidying only4–8 weeks
48–64Good foundation — targeted gap-closing required8–14 weeks
30–47Significant gaps — structured implementation programme needed14–22 weeks
Under 30EMS essentially not in place — full implementation required6+ months
H

Hufsa Moonis Mir

TÜV-Certified ISO 14001 Auditor and founder of Sustainability Frisk. This checklist reflects the actual audit criteria used in Stage 1 and Stage 2 certification audits. €2.3M professional indemnity insurance.

Frequently asked questions

What is an ISO 14001 gap analysis?

An ISO 14001 gap analysis compares your current environmental management practices against the requirements of ISO 14001:2015. It identifies which clauses you already meet, which are partially in place, and which are missing — giving you a prioritised action list before your certification audit.

How long does an ISO 14001 gap analysis take?

For a single manufacturing facility, a focused gap analysis takes 2–5 days: document review, interviews, site walk, and a gap report. Larger or multi-site facilities take longer.

What are the most common ISO 14001 gaps in manufacturing?

The most common gaps are: incomplete aspects and impacts register (Clause 6.1.2), missing significant aspect determination methodology, no operational controls for significant aspects (Clause 8.1), no emergency preparedness procedure (Clause 8.2), and no formal management review record (Clause 9.3).

What is the difference between a Stage 1 and Stage 2 audit?

Stage 1 is a document review — the auditor checks whether your EMS is designed and documented to meet ISO 14001. Stage 2 is the full certification audit verifying implementation. Complete a gap analysis before Stage 1 so documentation gaps are closed before the auditor arrives.

Need help closing your ISO 14001 gaps?

Our ISO 14001 implementation support covers gap analysis, document development, internal audit, and auditor-readiness preparation. Fixed price from €4,500.

Book a Free 30-Minute Scoping Call
Chat on WhatsApp