Operational planning and control for implementation of ISO 14001:2015

The type and extent of operational control(s) depend on the nature of the operations, the risks and opportunities, significant environmental aspects and compliance obligations. An organization has the flexibility to select the type of operational control methods, individually or in combination, that are necessary to make sure the process(es) is (are) effective and achieve(s) the desired results. Such methods can include:

a) designing (a) process(es) in such a way as to prevent error and ensure consistent results;

b) using technology to control (a) process(es) and prevent adverse results (i.e. engineering controls);

c) using competent personnel to ensure the desired results;

d) performing (a) process(es) in a specified way;

e) monitoring or measuring (a) process(es) to check the results;

f) determining the use and amount of documented information necessary.

The organization decides the extent of control needed within its own business processes (e.g. procurement process) to control or influence (an) outsourced process(es) or (a) provider(s) of products and services. Its decision should be based upon factors such as:

— knowledge, competence and resources, including:

— the competence of the external provider to meet the organization’s environmental management system requirements;

— the technical competence of the organization to define appropriate controls or assess the adequacy of controls;

— the importance and potential effect the product and service will have on the organization’s ability to achieve the intended outcome of its environmental management system;

— the extent to which control of the process is shared;

— the capability of achieving the necessary control through the application of its general procurement process;

— improvement opportunities available.

When a process is outsourced, or when products and services are supplied by (an) external provider(s), the organization’s ability to exert control or influence can vary from direct control to limited or no influence. In some cases, an outsourced process performed onsite might be under the direct control of an organization; in other cases, an organization’s ability to influence an outsourced process or external supplier might be limited.

When determining the type and extent of operational controls related to external providers, including contractors, the organization may consider one or more factors such as:

— environmental aspects and associated environmental impacts;

— risks and opportunities associated with the manufacturing of its products or the provision of its services;

— the organization’s compliance obligations.



An outsourced process is one that fulfils all of the following:

— it is within the scope of the environmental management system;

— it is integral to the organization’s functioning;

— it is needed for the environmental management system to achieve its intended outcome;

— liability for conforming to requirements is retained by the organization;

— the organization and the external provider have a relationship where the process is perceived by interested parties as being carried out by the organization.

Environmental requirements are the organization’s environmentally-related needs and expectations that it establishes for, and communicates to, its interested parties (e.g. an internal function, such as procurement; a customer; an external provider).

Some of the organization’s significant environmental impacts can occur during the transportation, delivery, use, end-of-life treatment or final disposal of its product or service. By providing information, an organization can potentially prevent or mitigate adverse environmental impacts during these life cycle stages.