ISO 14001 Internal Auditor Training: Audit Your EMS to ISO 14001:2026

Opens with the question of how you know your site's environmental controls really work, a self-rating, and a list of three things you used or threw away today. Covers three disasters and the auditor's questions each raises: the Norilsk diesel tank collapse, where about 21,000 tonnes leaked; the MT Princess Empress sinking off Oriental Mindoro on 28 February 2023 with 800,000 litres of fuel oil; and the LG Polymers styrene gas leak at Vizag on 7 May 2020, where the siren was never switched on. Introduces the 200-room Dubai beach resort audited through the course, what changed in 2026, the twenty-five modules in three parts, the audit practice, the final exam, and the course's scope as internal, not lead auditor, training. It ends with a recap and three practice questions.

What you will be able to do

• Turn an environmental disaster into questions an auditor would ask
• Explain why an internal audit is worth what it finds
• State what this course does and does not qualify you to do

Why it matters

An audit that asks for evidence finds weak tanks, plans and contractors before they cause harm, rather than after.

Practice: Practice: Welcome, and why EMS internal audit matters · 3 questions

Starts at a data centre in Singapore whose aspects list holds only office paper, bins and printer cartridges, until the auditor walks the site. Covers the environment as including people, with a two-way relationship: what the organisation does to it, and what it does to the organisation. Explains the key terms, the three intended outcomes of an EMS, plan, do, check, act, the common myths, and the structure of the standard in ten clauses. Makes clear that the criteria for an audit are the requirements, while notes and Annex A help understanding and add no requirements. Ends with the auditor's method: read the list, walk the site, and compare the two. It ends with a recap and three practice questions.

What you will be able to do

• Explain the two-way relationship between an organisation and the environment
• Describe the intended outcomes, PDCA and structure of ISO 14001
• Use requirements, not notes or Annex A, as audit criteria

Why it matters

Knowing exactly what counts as a requirement keeps your findings on solid ground with the auditee.

Practice: Practice: The environment and the EMS · 3 questions

Opens Part B at a food processing plant in Mumbai whose list of issues names costs, staff turnover and a competitor, while the production office talks of city water rationing that nobody listed. Covers clause 4.1 measured against the intended outcomes: at least environmental performance, compliance and objectives. Explains internal and external issues and, since 2026, the environmental conditions the clause names, in both directions: what the organisation affects and what can affect it. Shows that no document is required, so the auditor follows one issue from the list to a risk, an action, a check and the management review, as a Toronto hospital does with summer heat waves and its cooling plant. It ends with 'Which clause?' moments, a recap and three practice questions.

What you will be able to do

• Audit clause 4.1 against the EMS intended outcomes
• Identify environmental conditions that can affect the organisation
• Follow one issue from the list to action and management review

Why it matters

Testing whether an issue leads to action shows whether context is real or just a list made for the auditor.

Practice: Practice: Context: issues and environmental conditions · 3 questions

Starts at an airport ground-handling company in Hong Kong whose scope reads baggage, ramp and aircraft support, until the auditor asks what it leaves out. Covers clause 4.2: the relevant interested parties, their needs and expectations, and which of them the organisation adopts as compliance obligations, shown by a London printing company agreeing to use only certified paper. Explains clause 4.3: an honest scope boundary, considering control and influence over the life cycle, with everything inside it in the EMS. Covers clause 4.4: the processes needed and their interactions, following the hand-overs between them, and why an auditor should not demand a procedure for every clause. It ends with 'Which clause?' moments, a recap and three practice questions.

What you will be able to do

• Audit how interested parties' needs become compliance obligations
• Test whether the EMS scope is an honest boundary
• Audit EMS processes by following the hand-overs between them

Why it matters

Checking the boundary first stops an audit missing the activities that matter most to neighbours and regulators.

Practice: Practice: Interested parties, the scope and the EMS · 3 questions

Opens at a hospital in Toronto whose framed environmental policy, signed by the chief executive, makes promises the auditor then tests with the people at the top. Covers clause 5.1: top management keeps accountability even when work is delegated, with the auditor looking for decisions, money and targets. Explains clause 5.2: a policy with three commitments, protect the environment, fulfil compliance obligations and improve, fitted to the site and known by its people. Covers clause 5.3: roles assigned and communicated, with someone owning conformity and reporting to top management. Shows a Singapore data centre chief executive adding energy per server to managers' targets, and why a target nobody reviews is only a promise. It ends with 'Which clause?' moments, a recap and three practice questions.

What you will be able to do

• Audit leadership through decisions, resources and targets
• Check the environmental policy for its three commitments
• Verify that EMS roles and reporting lines are assigned and known

Why it matters

Auditing leadership with the leaders shows whether the EMS will survive a hard budget year.

Practice: Practice: Leadership, the policy and roles · 3 questions

Returns to the three things you used or threw away in Module 1 and gives them their proper names. Shows clause 6.1 in one picture: three questions about aspects, compliance obligations, and risks and opportunities, then planning action that other clauses carry out. Explains from first principles that an environmental aspect is the cause, what the organisation does, takes from the environment or gives back, and an environmental impact is the effect, adverse or beneficial. Works one example from start to finish at the Dubai resort, then shows a Sydney university listing laboratory solvent waste and electricity, and how the auditor walks one laboratory to compare what is seen with the list. It ends with 'Which clause?' moments, a recap and three practice questions.

What you will be able to do

• Explain how the parts of clause 6.1 fit together
• Tell an environmental aspect from an environmental impact
• Check an aspects list against what you see on site

Why it matters

Naming the cause and its effect correctly is the base for every later audit question about aspects.

Practice: Practice: 6.1 in one picture; aspects and impacts · 3 questions

Starts at a printing company in London whose aspects register covers the presses running, while the shop floor talks of the solvent recovery unit's failures and start-ups. Teaches four checks for a complete list: every activity; normal, abnormal and emergency conditions and planned change; aspects the organisation controls and those it can influence through suppliers, contractors and what it provides; and a life cycle perspective at each stage, without a detailed assessment. Shows a Toronto hospital adding the aspects of a new laboratory before it opens, and how an auditor compares the register's revision date with the opening date, so the aspects come first. It ends with 'Which clause?' moments, a recap and three practice questions.

What you will be able to do

• Test an aspects list against every activity and condition
• Check that aspects under influence and the life cycle are covered
• Verify that new activities are assessed before they start

Why it matters

A first list is never complete; testing it finds the start-ups, failures and contractors where incidents happen.

Practice: Practice: Have we found them all? · 3 questions

Opens at a food processing plant in Mumbai whose wastewater discharge was significant last year and not significant this year, with no change on the ground. Covers determining significant aspects with established criteria set by the organisation, with environmental criteria first. Explains that aspects, criteria and significant aspects are documented information, communicated and kept up to date. Shows the method: re-score a sample with the organisation's own criteria, check that the rule is written and applied to every line, as at a Hong Kong ground-handling company using a scoring threshold, and never accept an aspect downgraded because the fix is expensive. It ends with 'Which clause?' moments, a recap and three practice questions.

What you will be able to do

• Audit the criteria used to decide significant aspects
• Re-score a sample of aspects with the organisation's own criteria
• Challenge an aspect downgraded for cost rather than environmental reasons

Why it matters

Testing that significance is honest keeps money and effort going where the environmental risk really is.

Practice: Practice: Significant environmental aspects · 3 questions

Starts at a university campus in Sydney whose register lists forty laws by title and year, while a chemistry building permit sets limits nobody has linked to the register. Covers compliance obligations as what the organisation has to comply with and what it chooses to: laws, permits, contracts and pledges. Explains how clause 6.1.3 asks how each one applies: which area, which limit, who does what and how often, and that obligations are documented. Shows a Mumbai food plant using an industry association's legal update service, and asking for the last three updates and what was done with each. Ends with making the register, the permit and the monitoring records agree. It ends with 'Which clause?' moments, a recap and three practice questions.

What you will be able to do

• Audit a register of compliance obligations for how each applies
• Check permits and their limits against monitoring records
• Verify that changes in obligations are picked up and acted on

Why it matters

A permit read and linked to monitoring is where many environmental findings, and fines, are prevented.

Practice: Practice: Compliance obligations · 3 questions

Opens with a question: is harm to marine life from effluent an impact or a risk? It is an impact; the fine, closure order and lost bookings are risks. Starts at a data centre in Singapore whose forty-line risk register simply copies the aspects register. Covers clause 6.1.4: risks and opportunities from four sources, including external environmental conditions, documented. Explains clause 6.1.5: actions built into EMS and business processes, considering technological options and financial, operational and business requirements, with a way to check that they worked, as a Sydney university does with its energy use. Ends with following one aspect from clause 6.1 to the management review. It ends with 'Which clause?' moments, a recap and three practice questions.

What you will be able to do

• Tell an environmental impact from a risk to the organisation
• Audit risks and opportunities from all four sources
• Check that planned actions are built into processes and evaluated

Why it matters

Separating impacts from risks gives management both pictures it needs to decide and act.

Practice: Practice: Risks and opportunities, and planning action · 3 questions

Starts at an airport ground-handling company in Hong Kong whose objective for its significant diesel aspect reads only 'reduce fuel use', with no figure, date or owner. Covers clause 6.2.1: objectives that take significant aspects and compliance obligations into account, measurable if practicable, monitored, communicated and documented. Explains clause 6.2.2: a plan that says what will be done, with what resources, who is responsible, when, and how results will be evaluated. Covers clause 6.3, new in 2026: changes that affect the EMS are planned so outcomes are still achieved, shown by a London printing company buying a new press, and checking that the updates came before it first ran. It ends with 'Which clause?' moments, a recap and three practice questions.

What you will be able to do

• Audit environmental objectives for measures, owners and dates
• Check plans to achieve objectives against clause 6.2.2
• Audit how changes to the EMS are planned under clause 6.3

Why it matters

Objectives with figures, owners and dates are ones anyone can show were achieved, or not.

Practice: Practice: Objectives and planning of changes · 3 questions

Opens at a hospital in Toronto where the training matrix is all green, until the auditor watches two contract cleaners behind the laundry. Covers clause 7.1: resources the EMS needs determined, provided and named in plans. Explains clauses 7.2 and 7.3: people doing work under the organisation's control, contractors included, are competent and aware, and training is checked for effectiveness, such as the operator on shift at the sewage plant knowing what to do when an alarm sounds at two in the morning. Covers clause 7.4: what, when, with whom and how to communicate internally and externally, shown by a Mumbai food plant replying to a neighbour's odour complaint within a week and logging it. It ends with 'Which clause?' moments, a recap and three practice questions.

What you will be able to do

• Audit competence and awareness at the workplace, contractors included
• Check that training is evaluated for effectiveness
• Audit internal and external communication, including replies to complaints

Why it matters

Testing people where they work, not only on paper, shows whether the EMS works on the night shift.

Practice: Practice: Resources, competence, awareness, communication · 3 questions

Starts at the Dubai resort's engineering office, where a renewed sewage treatment plant discharge permit has a tighter limit than the operator is working to. Covers clause 7.5 and its 2026 wording, documented information that is available or available as evidence, to quote in findings. Explains documents identified, reviewed and approved, current where they are used and protected, with permits and safety data sheets controlled as well, as a London printing company does for every ink and solvent. Covers retention and disposition set by compliance obligations, as at a Sydney university for boiler emission reports, and testing control both ways, from the list to the workplace and back. It ends with 'Which clause?' moments, a recap, three practice questions and an audit practice exercise.

What you will be able to do

• Quote the 2026 wording on documented information in findings
• Test document control from the list to the workplace and back
• Check retention periods against compliance obligations

Why it matters

Auditing the copy in the operator's hand catches the out-of-date limit before it becomes a permit breach.

Practice: Practice: Documented information · 3 questions

Opens in the hazardous waste store behind the Dubai resort's engineering workshop, where used oil, old lamps and batteries wait for the waste hauler, and asks whether the EMS stops at the gate. Covers clause 8.1: operating criteria and control in accordance with them, checking the strength of each control in the hierarchy of controls and that it works. Explains controlling planned changes and reviewing the consequences of unintended ones. Covers controlling or influencing external providers, including communicating environmental requirements to contractors, as a Hong Kong ground-handling company writes into its fuel contractor's contract, and the life cycle from design to final disposal. It ends with 'Which clause?' moments, a recap and three practice questions.

What you will be able to do

• Audit operating criteria and the strength of each control
• Check control of planned and unintended changes
• Audit how external providers are controlled or influenced

Why it matters

Following an aspect beyond the gate shows whether waste and contractors are really under control.

Practice: Practice: Operational planning and control · 3 questions

Starts beside the generator at the Dubai resort early in the evening shift, where the plan says a diesel spill is contained with the spill kit and the drain covered, and the auditor asks whether the night engineer knows it. Covers how clause 8.2 starts in clause 6.1.2, so every potential emergency found should have a planned response. Explains testing responses where practicable, and reviewing and revising them, in particular after tests and real emergencies, checking how long a response took and what changed. Covers making sure the people who would respond, night staff and contractors included, know what to do, illustrated by a Mumbai food plant briefing its cold store contractor and a London fire drill. It ends with 'Which clause?' moments, a recap, three practice questions and an audit practice exercise.

What you will be able to do

• Check that every potential emergency has a planned response
• Audit tests and reviews of emergency responses
• Verify that night staff and contractors know their role

Why it matters

Asking the night shift, not only the plan, shows whether a spill would be contained or reach the beach.

Practice: Practice: Emergency preparedness, response · 3 questions

Opens at the Dubai resort's monthly performance meeting, where water use per guest-night is down 12 per cent, and the auditor walks to the laundry to test the figure. Covers checking that monitoring data is valid: the right methods, and equipment that is calibrated or verified. Explains analysing and evaluating results against criteria and indicators so they reach people who can act, shown by a Singapore data centre charting electricity per unit of computing load. Covers clause 9.1.2: evaluating every compliance obligation at a set frequency and acting when needed, with a Toronto hospital using the city inspector's boiler report as Annex A allows. Recording is not evaluating. It ends with 'Which clause?' moments, a recap and three practice questions.

What you will be able to do

• Check that monitoring methods and equipment give valid data
• Audit how results are analysed and reach people who can act
• Audit the evaluation of compliance for every obligation

Why it matters

Comparing results with limits, and acting, is what turns a pile of readings into known compliance.

Practice: Practice: Monitoring, evaluation and compliance · 3 questions

Starts in the Dubai resort general manager's office, where last year's audit found two nonconformities at the sewage treatment plant and a result is over the permit limit. Covers clause 9.2: an internal audit programme built on environmental importance, changes and previous results, with objectives, criteria and scope for each audit, impartial auditors and reported results, shown by a Sydney campus adding two new chemical stores to its programme. Explains clause 9.3.2 inputs, including trends in nonconformities, monitoring, compliance and audit results, and communications such as a Toronto hospital board's review of neighbour complaints. Covers clause 9.3.3 conclusions, decisions and actions, available as evidence. It ends with 'Which clause?' moments, a recap and three practice questions.

What you will be able to do

• Audit an internal audit programme against clause 9.2
• Check that management review covers every clause 9.3.2 input
• Follow audit findings through to management review decisions

Why it matters

Following findings to a decision shows whether management actually sees and acts on repeated problems.

Practice: Practice: Internal audit and management review · 3 questions

Opens beside the Dubai resort generator in March, when diesel found in the storm drain to the beach was cleaned the same afternoon and the nonconformity closed. Covers clause 10.1: improvement from evaluation, compliance, audits and review, at a pace the organisation decides. Explains clause 10.2: react, control and mitigate, find the causes, check for similar nonconformities elsewhere, take corrective action and review its effectiveness. Shows a hydraulic oil leak from a tug at a Hong Kong ground-handling company, and a Singapore data centre with repeated refrigerant leaks checking its leak records afterwards. A nonconformity is closed when the corrective action is shown to work, not when the form is full. It ends with 'Which clause?' moments, a recap, three practice questions and an audit practice exercise.

What you will be able to do

• Audit the reaction to a nonconformity and its consequences
• Check that causes were found and similar cases looked for
• Verify that corrective action was shown to be effective

Why it matters

Checking that the cause was fixed, not just the spill, stops the same incident coming back next month.

Practice: Practice: Improvement and corrective action · 3 questions

Starts with a new internal auditor at the Dubai resort emailing the EMS coordinator to send all EMS documents before her first audit. Covers planning from two lists: the documented information the standard requires, and what the organisation has decided it needs. Explains the 2026 wording, available, available as evidence and to the extent necessary, and goes department by department, choosing the documents that show whether each control works. Shows a Singapore data centre's noise complaint log and a Mumbai plant's register of permit conditions. Closes Part B and leads into Part C and ISO 19011:2026. It ends with 'Which clause?' moments, a recap and three practice questions.

What you will be able to do

• List the documented information ISO 14001 requires
• Plan document requests department by department
• Read the exact 2026 wording on documented information

Why it matters

Knowing what must exist before you go looking for it makes audit preparation faster and findings sharper.

Practice: Practice: Documented information, department by department · 3 questions

Opens Part C with the question of what turns an auditor's opinion into a finding a manager must act on: a requirement and verifiable evidence. Covers ISO 19011:2026, the fourth edition published in May 2026, replacing the 2018 edition, as guidance rather than requirements. Explains the chain of audit criteria, audit evidence, audit findings and audit conclusions, and the three types of audit, with the internal audit as the first-party audit. Covers the seven principles of auditing and independence, including that internal auditors do not audit their own work, and a quick check on a finding based on canteen talk that breaks the evidence-based approach. It ends with a recap and three practice questions.

What you will be able to do

• Explain the chain from audit criteria to audit conclusions
• Apply the seven principles of auditing in ISO 19011:2026
• Keep independence by not auditing your own work

Why it matters

Findings built on criteria and verifiable evidence are ones managers cannot dismiss as opinion.

Practice: Practice: Audit concepts and principles · 3 questions

Starts with last year's internal audit at the Dubai resort, whose whole plan was one line, audit the EMS in one day, starting at the front office. Covers the audit programme, considering environmental importance, changes and previous results, with most effort where the significant aspects and obligations are. Explains defining each audit's objectives, scope and criteria, with every clause named by number and title. Shows an audit plan that puts the most important area first, while there is time to dig, and a checklist that turns each requirement into open questions with a sample. In the audit practice after this module you build a short checklist and compare it with a model answer. It ends with a recap, three practice questions and an audit practice exercise.

What you will be able to do

• Build an audit programme based on environmental importance
• Define audit objectives, scope and criteria by clause
• Write an audit plan and a checklist of open questions

Why it matters

Planning from importance puts your audit time where the significant aspects and obligations are.

Practice: Practice: Planning the audit programme, plan, checklist · 3 questions

Opens in the boiler room at the Dubai resort, where an internal auditor walks in with no opening meeting and no ear protection, and the chief engineer is annoyed before a question is asked. Covers the opening meeting: agreeing the plan, introducing the team and roles, and confirming the audit can run, where short is fine but skipped is not. Explains auditing on site with safety first and hands off, using remote methods where they fit while auditing plant, stores and spills on site. Covers the human aspects, the good and bad auditor, and keeping people talking by sharing what has been seen, good and bad, before lunch. It ends with a recap and three practice questions.

What you will be able to do

• Run a short, effective opening meeting
• Audit safely on site and choose where remote methods fit
• Behave in ways that keep auditees giving full, accurate information

Why it matters

Opening well and behaving well on site is what makes people tell the auditor the truth.

Practice: Practice: Conducting the audit, I opening, site, people · 3 questions

Opens with an operator saying 'we test the pH every day', which is information, not yet evidence. Covers investigating to the depth necessary: following the trail from an answer to a record to the next question, and stopping when the sample is sufficient. Explains verifying information until it is complete, correct, consistent and current, sampling by judgement or statistics sized to the risk, and recording exactly what was looked at. Shows how to follow one significant aspect end to end at the resort, audit compliance, take notes, and use open questions to explore and closed questions to confirm, replacing a question that suggests its own answer with 'show me yesterday's entry'. It ends with a recap and three practice questions.

What you will be able to do

• Verify information before treating it as audit evidence
• Choose and record an audit sample sized to the risk
• Use open and closed questions, not suggestive ones, to follow an aspect

Why it matters

Turning answers into verified evidence is what makes your findings stand up when they are challenged.

Practice: Practice: Conducting the audit: evidence and the thread · 3 questions

Opens with the question of whether the auditee must accept a nonconformity before it is reported: no, the facts must be understood and the evidence acknowledged. Covers generating findings, sharing them with the auditee there and then, and reviewing each nonconformity before the closing meeting. Teaches the four-part nonconformity statement: criteria, evidence, the statement and the grade, using the most specific clause, and grading by the organisation's own criteria. Covers the six points of a closing meeting, reporting what was presented, and following up until the action is shown to work. In the audit practice after this module you write and grade nonconformities yourself. It ends with a recap, three practice questions and an audit practice exercise.

What you will be able to do

• Write a nonconformity in four parts with the most specific clause
• Grade findings using the organisation's criteria
• Run a closing meeting and follow up until actions work

Why it matters

A statement anyone can check, followed until it works, is what turns an audit into real improvement.

Practice: Practice: Findings, closing and follow-up · 3 questions

Opens with the question of whether an audit of an area should start with its procedure or the standard: with the standard, then the area's significant aspects and compliance obligations, and only then its procedure. Walks through an effective internal audit step by step, from identifying every requirement of ISO 14001:2026 that applies to an area, through the plan, open questions, verified evidence and careful notes, to four-part nonconformities reviewed with the auditee and followed up. Sets up a mock audit at the Dubai resort, recaps the whole course in three lines, and leads into the mock audit practice and the final exam.

What you will be able to do

• Start an area audit from the standard, aspects and obligations
• Carry out each step of an effective internal audit
• Apply the whole method in a mock audit

Why it matters

Auditing in the right order, from requirements to evidence to findings, is how management acts and the environment benefits.

Practice: Practice: An effective EMS audit, step by step · 3 questions