How to get ISO 14001 certified in 2026: the concrete steps
ISO 14001 certification attests that an organisation controls its environmental impacts through a structured, audited management system. Contrary to a common belief, it is not reserved for large industrial sites: SMEs, service companies and local authorities commit to it every year to structure their environmental efforts, respond to tenders or satisfy a key customer. Here is the complete path, step by step, under the 2015 version of the standard — the version currently in force.
Step 1 — Frame the project and secure top-management commitment
ISO 14001 makes leadership commitment a requirement in its own right: the environmental policy is owned at the highest level and carries three mandatory commitments — protection of the environment and prevention of pollution, fulfilment of compliance obligations, and continual improvement. Before anything else, frame the project:
- the scope: which sites and activities the system covers;
- the coordinator: someone who steers the effort without carrying it alone;
- the target date and budget, based on quotes from accredited certification bodies.
The hub page for ISO 14001 certification summarises the scheme: voluntary status, certification bodies, three-year cycle.
Step 2 — Carry out the initial environmental review
This is the foundation of the whole system: the inventory of your environmental aspects (energy and water consumption, discharges, waste, accidental-pollution risks, indirect impacts linked to purchasing and to the life cycle of your products and services) and their rating to identify the significant aspects. In parallel, you compile your compliance obligations: applicable environmental regulations, site-specific permits, voluntary commitments made to customers.
This step deserves time and method — we devote a full article to it: how to run your ISO 14001 environmental review. A system built on a rushed review produces off-target objectives, which auditors spot quickly.
Step 3 — Build the environmental management system
Three main workstreams:
- Policy and objectives. Measurable environmental objectives focused on the significant aspects, with action plans, owners and deadlines.
- Operational control. Concrete arrangements for high-impact activities: waste sorting rules and disposal channels, equipment maintenance, requirements on purchasing and subcontracting, and emergency preparedness (spill, fire, leak) with periodic drills.
- Documented information. The standard does not require an “environmental manual”: it requires the documentation needed for the system to work — and only that. A lean, genuinely used system beats an exhaustive binder nobody opens.
Do not overlook two requirements often neglected at this stage: awareness — everyone whose work affects the significant aspects must know their role and the consequences of a deviation, which the auditor checks by interviewing the field — and communication, internal and external: the standard requires deciding what the organisation communicates about its environmental management, to whom and how, and handling requests from interested parties (neighbours, authorities, customers).
Step 4 — Run the system before the audit
The most frequent mistake is presenting the auditor with a brand-new system that has never been used. The audit assesses operation: indicators actually tracked, regulatory compliance actually evaluated, an emergency drill actually run, staff actually aware. Plan for several months of real practice.
Academic research confirms that implementation depth is where everything is decided: Olivier Boiral’s study published in 2007 in Organization Science, conducted inside certified organisations, shows that ISO 14001 certification can remain a “rational myth” — an external signal decoupled from daily practice — when adoption is superficial, with real benefits depending on how deeply the standard is embedded in day-to-day work (see the study). A certificate earned on a paper system will bring you neither performance nor a calm audit.
Step 5 — Internal audit and management review
Two non-negotiable prerequisites before certification:
- The internal audit covers all the requirements of the standard across the scope. It must be carried out by someone competent and independent from the activities audited — an external auditor is allowed, and often sensible in small structures.
- The management review examines the system’s results: achievement of objectives, regulatory compliance, nonconformities, adequacy of resources. It ends with recorded decisions.
Step 6 — The two-stage certification audit
The initial audit unfolds in two parts. Stage 1 checks that the system is ready: environmental review, compliance-obligations register, documentation, completion of the internal audit and management review. Stage 2, on site, assesses actual implementation through interviews, field observation and evidence sampling. Any findings are addressed with corrective actions before the certificate is issued — valid for three years, subject to annual surveillance audits.
Choose a certification body accredited by Cofrac (the French accreditation committee) and compare several quotes on a strictly identical scope: audit duration depends on headcount, number of sites and the complexity of activities. Anticipate the calendar too: auditors’ schedules fill up months ahead, and time is needed between stage 1 and stage 2 to fix the points raised. If you are aiming at a firm deadline — a tender, for instance — build the schedule backwards from that date. To anticipate the full budget, read our article on the price of ISO 14001 certification.
Already ISO 9001 certified?
Good news: the two standards have shared the same structure since their 2015 versions, and part of your habits (document control, internal audit, management review, corrective actions) transfers directly. Many organisations merge both systems — or all three with ISO 45001 — into an integrated QSE (quality, safety, environment) system with combined audits. The quality-side journey is described in our guide how to get ISO 9001 certified.
Take action
ISO 14001 certification is earned in the field: a solid environmental review, a simple system genuinely used, a few months of proven operation. Start with the ISO 14001 certification hub page to frame the scheme, then launch your initial environmental review this week.
Frequently asked questions
+How long does it take to get ISO 14001 certified?
It depends on your starting point, the size of the scope and your team's availability. You need to build the environmental management system, then run it long enough to produce evidence (indicators, internal audit, management review) before the certification audit. The journey typically spans several months to a year.
+Who issues ISO 14001 certification in France?
Third-party certification bodies such as AFNOR Certification, Bureau Veritas or SGS. Choosing a body accredited by Cofrac (the French accreditation committee) guarantees the certificate's recognition, notably in public and private tenders.
+Can a service company pursue ISO 14001?
Yes, the standard is open to any organisation. A service company's environmental aspects (building energy, travel, purchasing, waste, IT) are real, and the approach is increasingly valued by buyers, including for intellectual services.