ISO 14001 Certification: Environmental Management System Consultancy

ISO 14001 certification is independent confirmation that your environmental management system (EMS) meets ISO 14001, the international standard for managing environmental impacts and compliance obligations. Sovereign Secure provides the consultancy: we help you design, document and run the EMS. An independent certification body then audits it in two stages and makes the certification decision.

Sovereign Secure Ltd is an ISO 27001-certified UK consultancy, headquartered in Accrington, Lancashire. ISO 14001 sits within our wider ISO certification service, which also explains how certification and accreditation differ.

What is ISO 14001?

ISO 14001 is the international standard for an environmental management system (EMS). It gives any organisation, of any size or sector, a structured way to identify and control how its activities, products and services affect the environment, meet its compliance obligations and improve environmental performance over time. The current edition is ISO 14001:2026.

It does not set performance limits such as emission levels. Instead it asks you to understand your own environmental aspects, decide which are significant, control them and keep improving, with leadership accountable for the system.

What does ISO 14001 require?

ISO 14001 requires a management system that controls how your activities, products and services affect the environment, meets your compliance obligations and improves environmental performance over time. As in ISO 9001 and ISO 27001, the requirements sit in clauses 4 to 10; our guide to what ISO 9001 is shows the same structure for quality. The table reflects the 2026 edition.

What is an environmental aspects and impacts register?

An aspects and impacts register is the core of an EMS: it lists how your activities interact with the environment (the aspects) and the changes they cause (the impacts), then shows which are significant and how you control them. It should cover normal operation, abnormal conditions such as start-up or maintenance, and reasonably foreseeable emergencies, viewed across the life cycle of what you provide.

You decide significance with your own documented criteria, such as scale, severity, frequency and legal or stakeholder concern. Significant aspects then drive your objectives, operational controls and training. Where energy is your most significant aspect, ISO 50001 energy management goes deeper on energy performance and can share the same management system.

What goes in an ISO 14001 legal register?

A legal register lists your compliance obligations: the environmental laws that apply to you and any other requirements you choose to adopt, such as customer contract terms or voluntary commitments. For each one it should record what applies, to which site or activity, who owns it and how compliance is checked.

Typical UK entries include the waste duty of care under section 34 of the Environmental Protection Act 1990 (see the government’s waste duty of care code of practice), environmental permits, packaging producer responsibility, F-gas rules for refrigeration and air conditioning, and trade effluent consents. Environmental law is devolved, so the register depends on whether your sites are in England, Wales, Scotland or Northern Ireland.

Listing laws is only half the job: you must also evaluate compliance at planned intervals and keep the results as evidence, which the auditor will sample at Stage 2.

How do you get ISO 14001 certification?

You get ISO 14001 certification by building and running an EMS, then passing a two-stage audit by an independent certification body.

1. Agree scope. Which sites, activities, products and services the certificate must cover, and for which customers or tenders.
2. ISO 14001 gap analysis. Measure current practice against every clause of ISO 14001 and rank the gaps.
3. Aspects and legal registers. Identify aspects, decide significance and list your compliance obligations.
4. Policy, objectives and controls. Set measurable environmental objectives and the operational controls and emergency arrangements your significant aspects need.
5. Run it. Produce the records auditors sample: monitoring results, waste transfer notes, training, communications, test drills.
6. Evaluate compliance, internal audit and management review. All three should be complete before Stage 2.
7. Stage 1 audit. The certification body reviews your documentation and readiness.
8. Stage 2 audit. Interviews, site observation and record sampling to confirm the EMS works. The certificate follows once any major nonconformities are closed and the certification body accepts your plan for minor ones.

The certificate lasts three years, with surveillance audits in years two and three and a recertification audit before expiry.

How long does ISO 14001 take?

Small and medium-sized organisations are typically ready for certification in three to six months. The timeline depends less on documents than on how long the system needs to run to produce evidence, such as a completed compliance evaluation and an internal audit.

How much does ISO 14001 certification cost?

There is no fixed price: ISO 14001 certification cost depends on your scope, and it has two parts, the certification body’s audit fees over the three-year cycle and any consultancy you buy to get ready. These are the drivers:

Budget for the full three-year cycle: Stage 1 and Stage 2, two surveillance audits, then recertification. Ask us for a fixed consultancy quote once we know your scope.

What changed in ISO 14001:2026?

ISO 14001:2026 was published on 15 April 2026 and replaced ISO 14001:2015. Certificates to the 2015 edition stay valid until the transition period ends on 30 April 2029, the deadline set by Global ACI’s mandatory transition requirements for accredited certification bodies. After 31 October 2027, new certifications can only be issued to ISO 14001:2026. The revision is targeted rather than a rewrite, and ISO sets out the changes in its own summary of what changed in ISO 14001:2026.

If you are already certified, assess the gaps against the 2026 text, update your context analysis, risk method, change planning, supplier controls and audit programme, and cover the changes in an internal audit and management review before your certification body carries out the transition audit.

If you are starting now, build to the 2026 edition so you do not need a second round of changes. Quality management changed in the same year; see our guide to ISO 9001:2026.

Is ISO 14001 worth it for a small business?

ISO 14001 is worth it for a small business when someone asks for it or when environmental risk costs you money. It is harder to justify as a badge alone.

A small firm can meet ISO 14001 with a short policy, a proportionate aspects register, a legal register and a handful of objectives tracked in tools it already uses.

Can ISO 14001 run alongside ISO 9001 and ISO 45001?

Yes. The three standards share the clause 4 to 10 structure, so environment, quality and health and safety can run as one integrated management system with one context analysis, compliance register, internal audit programme and management review. Many organisations certify to ISO 9001 first and add environment, or build environment and ISO 45001 occupational health and safety together because their legal registers and operational controls overlap. Asset-intensive organisations can add ISO 55001 asset management, which shares the same structure. Food manufacturers often add ISO 22000 food safety management to the same system. Whether the certification audits can be combined is for the certification body to decide; we confirm it for your scope before you commit.

ISO 14001 consultant or certification body: who does what?

An ISO 14001 consultant helps you build the EMS; an independent certification body audits it and issues the certificate, never the consultant. ISO/IEC 17021-1 requires certification bodies to stay impartial, so a certification body cannot audit a management system it helped design.

We build the EMS with you; the certification body audits it and makes its own decision. No consultant can guarantee the outcome, so be wary of any promise of a certificate without a full Stage 1 and Stage 2 audit. If a tender specifies a particular accreditation body, tell us at the start and we will confirm how your certificate will be issued before you commit.

Why Sovereign Secure

• We hold ISO 27001 ourselves, so we go through the same kind of surveillance audits we prepare clients for.
• Proportionate systems. Registers and procedures sized to your real impacts, not a generic template pack.
• Consultancy and certification kept separate. Our partner certification body is MQA International, an independent body that makes its own certification decisions and is accredited for ISO 14001 by IAS; we confirm how your certificate will be issued before you commit.
• One partner for several standards. Quality, health and safety, and ISO 27001 information security can share one integrated system.
• UK company since 2012, headquartered in Accrington and working with clients across the UK.

Get an ISO 14001 quote

Tell us how many people and sites are in scope, what you do on each site (including any permits, chemicals or outsourced processes), any certificates you already hold and your deadline. We will send a fixed quote for the consultancy and explain the certification audit stages for your scope. Request your ISO 14001 quote or call +44 161 523 5276.